vendor/dh/sylius-access-control-layer-plugin/src/Access/AdministrationGroupChecker.php line 56

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. namespace DH\SyliusAccessControlPlugin\Access;
  7. use DH\SyliusAccessControlPlugin\Access\Checker\PermissionsCheckerInterface;
  8. use DH\SyliusAccessControlPlugin\Entity\AdministrationGroupInterface;
  9. use Sylius\Component\Core\Model\AdminUserInterface;
  10. use Symfony\Component\Security\Core\User\UserInterface;
  11. use Symfony\Component\HttpFoundation\RequestStack;
  12. use Symfony\Component\HttpFoundation\Session\Session;
  13. use Symfony\Component\HttpFoundation\RedirectResponse;
  14. use Symfony\Component\HttpKernel\Event\RequestEvent;
  15. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  16. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  17. use Symfony\Contracts\Translation\TranslatorInterface;
  19. class AdministrationGroupChecker
  20. {
  21.     /** @var PermissionsCheckerInterface */
  22.     protected $permissionChecker;
  24.     /** @var RequestStack */
  25.     protected $requestStack;
  27.     /** @var Session */
  28.     protected $session;
  30.     /** @var TokenStorageInterface */
  31.     protected $tokenStorage;
  33.     /** @var UrlGeneratorInterface */
  34.     protected $router;
  36.     /** @var TranslatorInterface */
  37.     protected $translator;
  39.     public function __construct(
  40.         PermissionsCheckerInterface $permissionChecker,
  41.         RequestStack $requestStack,
  42.         Session $session,
  43.         TokenStorageInterface $tokenStorage,
  44.         UrlGeneratorInterface $router,
  45.         TranslatorInterface $translator
  46.     ) {
  47.         $this->permissionChecker = $permissionChecker;
  48.         $this->requestStack = $requestStack;
  49.         $this->session = $session;
  50.         $this->tokenStorage = $tokenStorage;
  51.         $this->router = $router;
  52.         $this->translator = $translator;
  53.     }
  56.     public function onKernelRequest(RequestEvent $event): void
  57.     {
  58.         $request = $event->getRequest();
  59.         $route = $request->attributes->get('_route');
  60.         $permissionChecker = $this->permissionChecker;
  62.         $user = $this->getUser();
  64.         if (null !== $route && $user instanceof AdminUserInterface && $user->getAdministrationGroup() instanceof AdministrationGroupInterface) {
  66.             if (!$permissionChecker->isUserGranted($route, $user)) {
  68.                 if (!$this->requestStack->getCurrentRequest()->isXmlHttpRequest()) {
  70.                     $this->addAccessErrorFlash($event->getRequest()->getMethod());
  71.                     $event->setResponse($this->getRedirectResponse($event->getRequest()->headers->get('referer')));
  72.                 }
  73.             }
  74.         }
  75.     }
  77.     private function addAccessErrorFlash(string $requestMethod): void
  78.     {
  79.         if ('GET' === $requestMethod || 'HEAD' === $requestMethod) {
  80.             $message = $this->translator->trans('dh_sylius_access_control_plugin.ui.no_access', [], 'flashes');
  81.             $this->session->getFlashBag()->add('error', $message);
  83.             return;
  84.         }
  86.         $message = $this->translator->trans('dh_sylius_access_control_plugin.ui.not_allowed', [], 'flashes');
  87.         $this->session->getFlashBag()->add('error', $message);
  88.     }
  90.     private function getRedirectResponse(?string $referer): RedirectResponse
  91.     {
  92.         if (null !== $referer) {
  93.             return new RedirectResponse($referer);
  94.         }
  96.         return new RedirectResponse($this->router->generate('sylius_admin_dashboard'));
  97.     }
  99.     protected function getUser(): ?UserInterface
  100.     {
  101.         if (null === $token = $this->tokenStorage->getToken()) {
  102.             return null;
  103.         }
  105.         if (!is_object($user = $token->getUser())) {
  106.             return null;
  107.         }
  109.         return $user;
  110.     }
  111. }