src/EventSubscriber/Validation/Operation/OperationSubscriber.php line 48

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber\Validation\Operation;
  5. use ApiPlatform\Core\EventListener\EventPriorities;
  6. use App\Entity\Operation\Coupon;
  7. use App\Entity\Operation\Draw;
  8. use App\Entity\Operation\Odr;
  9. use App\Entity\Operation\Operation;
  10. use App\Entity\Operation\Step;
  11. use App\Entity\User\User;
  12. use Exception;
  13. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  14. use Symfony\Component\HttpFoundation\Request;
  15. use Symfony\Component\HttpKernel\Event\ViewEvent;
  16. use Symfony\Component\HttpKernel\Exception\UnauthorizedHttpException;
  17. use Symfony\Component\HttpKernel\KernelEvents;
  18. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  19. use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
  22. final class OperationSubscriber implements EventSubscriberInterface
  23. {
  24.     private $user;
  25.     private AuthorizationCheckerInterface $authChecker;
  27.     public function __construct(TokenStorageInterface $tokenStorage, AuthorizationCheckerInterface $authChecker)
  28.     {
  29.         if (!$tokenStorage->getToken()) {
  30.             return;
  31.         }
  32.         $this->user = $tokenStorage->getToken()->getUser();
  33.         $this->authChecker = $authChecker;
  34.     }
  36.     public static function getSubscribedEvents(): array
  37.     {
  38.         return [
  39.             KernelEvents::VIEW => [
  40.                 ['addOwner', EventPriorities::PRE_VALIDATE],
  41.             ],
  42.         ];
  43.     }
  45.     /**
  46.      * @throws Exception
  47.      */
  48.     public function addOwner(ViewEvent $event)
  49.     {
  50.         $operation = $event->getControllerResult();
  51.         $method = $event->getRequest()->getMethod();
  53.         if (
  54.             !$operation instanceof Operation ||
  55.             !in_array($method, [Request::METHOD_POST, Request::METHOD_PUT])) {
  56.             return;
  57.         }
  59.         if (!$this->user instanceof User) {
  60.             throw new Exception("Invalid User");
  61.         }
  63.         if (!$this->authChecker->isGranted("ROLE_ADMIN_SOGEC", $this->user)) {
  64.             throw new UnauthorizedHttpException("This user has no rights to create operations");
  65.         }
  67.         if (null === $this->user->getCompany()) {
  68.             throw new Exception("Invalid User");
  69.         }
  71.         $company = $this->user->getCompany();
  72.         $operation
  73.             ->setCompany($company)
  74.             ->setOwner($this->user);
  76.     }
  77. }