vendor/symfony/security-core/Authorization/Voter/RoleVoter.php line 21

Open in your IDE?
  1. <?php
  3. /*
  4. * This file is part of the Symfony package.
  5. *
  6. * (c) Fabien Potencier <fabien@symfony.com>
  7. *
  8. * For the full copyright and license information, please view the LICENSE
  9. * file that was distributed with this source code.
  10. */
  12. namespace Symfony\Component\Security\Core\Authorization\Voter;
  14. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  16. /**
  17. * RoleVoter votes if any attribute starts with a given prefix.
  18. *
  19. * @author Fabien Potencier <fabien@symfony.com>
  20. */
  21. class RoleVoter implements CacheableVoterInterface
  22. {
  23. private string $prefix;
  25. public function __construct(string $prefix = 'ROLE_')
  26. {
  27. $this->prefix = $prefix;
  28. }
  30. public function vote(TokenInterface $token, mixed $subject, array $attributes): int
  31. {
  32. $result = VoterInterface::ACCESS_ABSTAIN;
  33. $roles = $this->extractRoles($token);
  35. foreach ($attributes as $attribute) {
  36. if (!\is_string($attribute) || !str_starts_with($attribute, $this->prefix)) {
  37. continue;
  38. }
  40. $result = VoterInterface::ACCESS_DENIED;
  41. foreach ($roles as $role) {
  42. if ($attribute === $role) {
  43. return VoterInterface::ACCESS_GRANTED;
  44. }
  45. }
  46. }
  48. return $result;
  49. }
  51. public function supportsAttribute(string $attribute): bool
  52. {
  53. return str_starts_with($attribute, $this->prefix);
  54. }
  56. public function supportsType(string $subjectType): bool
  57. {
  58. return true;
  59. }
  61. /**
  62. * @return array
  63. */
  64. protected function extractRoles(TokenInterface $token)
  65. {
  66. return $token->getRoleNames();
  67. }
  68. }