src/EventSubscriber/NeedsPermissionSubscriber.php line 45

Open in your IDE?
  1. <?php
  4. namespace App\EventSubscriber;
  7. use App\Annotation\NeedsPermission;
  8. use App\Security\PermissionsService;
  9. use Doctrine\Common\Annotations\Reader;
  10. use Psr\Cache\InvalidArgumentException;
  11. use ReflectionClass;
  12. use ReflectionException;
  13. use ReflectionMethod;
  14. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  15. use Symfony\Component\HttpKernel\Event\ControllerEvent;
  16. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  17. use Symfony\Component\HttpKernel\KernelEvents;
  19. class NeedsPermissionSubscriber implements EventSubscriberInterface
  20. {
  21.     protected $annotationReader;
  23.     protected $permissionsService;
  25.     public function __construct(Reader $annotationReader, PermissionsService $permissionsService)
  26.     {
  27.         $this->annotationReader = $annotationReader;
  28.         $this->permissionsService = $permissionsService;
  29.     }
  30.     public static function getSubscribedEvents()
  31.     {
  32.         // return the subscribed events, their methods and priorities
  33.         return [
  34.             KernelEvents::CONTROLLER => [
  35.                 ['checkPermission', 10],
  36.             ],
  37.         ];
  38.     }
  40.     /**
  41.      * @param ControllerEvent $event
  42.      * @throws InvalidArgumentException
  43.      * @throws ReflectionException
  44.      */
  45.     public function checkPermission(ControllerEvent $event)
  46.     {
  47.         $controller = $event->getController();
  49.         if (!is_array($controller)) {
  50.             return;
  51.         }
  53.         $action = new ReflectionMethod($controller[0], $controller[1]);
  54.         $class = new ReflectionClass($controller[0]);
  56.         $annotation = $this
  57.             ->annotationReader
  58.             ->getMethodAnnotation($action, NeedsPermission::class);
  60.         if (!$annotation) {
  61.             $annotation = $this
  62.                 ->annotationReader
  63.                 ->getClassAnnotation($class, NeedsPermission::class);
  64.         }
  66.         if (!($annotation instanceof NeedsPermission)) {
  67.             return;
  68.         }
  70.         $permission = $annotation->permission;
  72.         $hasPermission = $this->permissionsService->check($permission);
  74.         if (!$hasPermission) {
  75.             throw new AccessDeniedHttpException();
  76.         }
  77.     }
  78. }