src/EventSubscriber/PermissionFilterSubscriber.php line 21

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use App\Controller\AdminFilterController;
  6. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  7. use Symfony\Component\HttpKernel\Event\ControllerEvent;
  8. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  9. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  11. class PermissionFilterSubscriber implements EventSubscriberInterface
  12. {
  13.     protected AuthorizationCheckerInterface $authChecker;
  15.     public function __construct(AuthorizationCheckerInterface $authChecker)
  16.     {
  17.         $this->authChecker = $authChecker;
  18.     }
  21.     public function onKernelController(ControllerEvent $event)
  22.     {
  23.         $controller = $event->getController();
  24.         if (is_array($controller)) {
  25.             $controller = $controller[0];
  26.         }
  28.         if ($controller instanceof AdminFilterController) {
  29.             $name = $event->getRequest()->get('_route');
  30.             if (!$this->authChecker->isGranted('ROLE_' . $name) and $name != 'app_admission_review_new' and $name != 'app_admission_review_request') {
  31.                 if (!$this->authChecker->isGranted('ROLE_SUPER_USER')) {
  32.                     throw new AccessDeniedHttpException("Хандах эрхгүй байна");
  33.                 }
  34.             }
  35.         }
  36.     }
  38.     public static function getSubscribedEvents()
  39.     {
  40.         return [
  41.             'kernel.controller' => 'onKernelController',
  42.         ];
  43.     }
  44. }