vendor/uvdesk/core-framework/Security/TicketVoter.php line 10

Open in your IDE?
  1. <?php
  3. namespace Webkul\UVDesk\CoreFrameworkBundle\Security;
  5. use Symfony\Component\DependencyInjection\ContainerInterface;
  6. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  7. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  8. use Symfony\Component\Security\Core\Authorization\AccessDecisionManagerInterface;
  10. class TicketVoter extends Voter
  11. {
  12. const MEMBER_VIEW = 'AGENT_VIEW';
  13. const CUSTOMER_VIEW = 'CUSTOMER_VIEW';
  15. private $container;
  16. private $decisionManager;
  18. public function __construct(ContainerInterface $container, AccessDecisionManagerInterface $decisionManager)
  19. {
  20. $this->container = $container;
  21. $this->decisionManager = $decisionManager;
  22. }
  24. protected function supports($attribute, $subject)
  25. {
  26. if (!in_array($attribute, [self::MEMBER_VIEW, self::CUSTOMER_VIEW])) {
  27. return false;
  28. }
  30. return $subject instanceof \Webkul\UVDesk\CoreFrameworkBundle\Entity\Ticket;
  31. }
  33. protected function voteOnAttribute($attribute, $ticket, TokenInterface $token)
  34. {
  35. $user = $token->getUser();
  37. if (!$user instanceof \Webkul\UVDesk\SupportBundle\Entity\User) {
  38. return false;
  39. }
  41. switch ($attribute) {
  42. case self::MEMBER_VIEW:
  43. if ($this->decisionManager->decide($token, ['ROLE_ADMIN'])) {
  44. return true;
  45. } else if ($this->decisionManager->decide($token, ['ROLE_AGENT'])) {
  46. $userInstance = $user->getAgentInstance();
  47. dump($userInstance->getTicketAccessLevel());
  48. die;
  50. // switch ($userInstance->getTicketAccessLevel()) {
  51. // case TICKET::AGENT_GLOBAL_ACCESS:
  52. // return true;
  53. // case TICKET::AGENT_GROUP_ACCESS:
  54. // // $userGroupAccess = (bool)$user->getGroups()->contains($ticket->getGroup());
  55. // // $userTeamAccess = (bool)$user->getUserSubGroup()->contains($ticket->getSubGroup());
  56. // // $access = $userGroupAccess ? $userGroupAccess : $userTeamAccess;
  57. // break;
  58. // case TICKET::AGENT_TEAM_ACCESS:
  59. // // $access = (bool)($user->getUserSubGroup()->contains($ticket->getSubGroup()));
  60. // break;
  61. // case TICKET::AGENT_INDIVIDUAL_ACCESS:
  62. // return (bool) ($user->getId() === $ticket->getAgent()->getId());
  63. // break;
  64. // default:
  65. // break;
  66. // }
  67. }
  69. break;
  70. case self::CUSTOMER_VIEW:
  71. if ($ticket->getIsTrashed()) {
  72. return false;
  73. }
  75. if ($ticket->getCustomer() == $user) {
  76. return true;
  77. } else {
  78. // $flag = 0;
  79. // $collaborators = $ticket->getCollaborators();
  81. // if(count($collaborators)) {
  82. // foreach ($collaborators as $collaborator) {
  83. // if($collaborator == $user)
  84. // $flag = 1;
  85. // }
  86. // if($flag)
  87. // return true;
  88. // else
  89. // return false;
  90. // }
  91. }
  93. break;
  94. default:
  95. break;
  96. }
  98. return false;
  99. }
  101. // protected function isGranted($attribute, $ticket, $user = null)
  102. // {
  103. // if (!is_object($user)) {
  104. // return false;
  105. // }
  107. // if($attribute == 'FRONT_VIEW') {
  108. // if($ticket->getIsTrashed())
  109. // return false;
  110. // if($ticket->getCustomer() == $user)
  111. // return true;
  112. // else {
  113. // $flag = 0;
  114. // $collaborators = $ticket->getCollaborators();
  115. // if(count($collaborators)) {
  116. // foreach ($collaborators as $collaborator) {
  117. // if($collaborator == $user)
  118. // $flag = 1;
  119. // }
  120. // if($flag)
  121. // return true;
  122. // else
  123. // return false;
  124. // }
  125. // }
  126. // } else {
  127. // if($user->getRole() == 'ROLE_AGENT') {
  128. // switch($user->getDetail()['agent']->getTicketView()){
  129. // case UserData::GLOBAL_ACCESS:
  130. // $access = true;
  131. // break;
  132. // case UserData::GROUP_ACCESS:
  133. // $userGroupAccess = (bool)$user->getGroups()->contains($ticket->getGroup());
  134. // $userTeamAccess = (bool)$user->getUserSubGroup()->contains($ticket->getSubGroup());
  135. // $access = $userGroupAccess ? $userGroupAccess : $userTeamAccess;
  136. // break;
  137. // case UserData::TEAM_ACCESS:
  138. // $access = (bool)($user->getUserSubGroup()->contains($ticket->getSubGroup()));
  139. // break;
  140. // case UserData::INDIVIDUAL_ACCESS:
  141. // default:
  142. // $access = (bool)($ticket->getAgent() == $user);
  143. // break;
  144. // }
  145. // if(!$access)
  146. // $access = (bool)($ticket->getAgent() == $user);
  147. // return $access;
  149. // // if($ticket->getAgent() == $user)
  150. // // return true;
  151. // // else {
  152. // // $flag = 0;
  153. // // $agentGroups = $user->getGroups();
  154. // // if($ticket->getGroup()) {
  155. // // foreach ($agentGroups as $group) {
  156. // // if($group->getId() == $ticket->getGroup()->getId())
  157. // // $flag = 1;
  158. // // }
  159. // // if($flag)
  160. // // return true;
  161. // // else
  162. // // return false;
  163. // // } else {
  165. // // }
  166. // // }
  167. // } else {
  168. // return true;
  169. // }
  170. // }
  171. // }
  172. }