Madlines Common Security Resolver
, (*1)
This is a very simple voters-bases security resolver.
It gets a list of voters which work in a middleware fashion
and it exposes a isGranted method which can ask voters if
user can perform a specified task., (*2)
Voters don't have to implement any interface. To make that library more generic
it uses duck typing instead. Voters need to be objects implementing one public method
named as you like., (*3)
Tasks can be whatever you like. Those can be objects or just string. It's up to your voters
to tell if they support it., (*4)
Usage:
Prepare a voter like that, (*5)
<?php
class PostEditVoter
{
public function isGranted($user, $task)
{
// if (!($task instanceof PostEditTask)) {
if ($task !== 'post_edit') {
return null; // null means 'ignore'
// returning integer 0 means the same
}
if ($user->hasRole('ROLE_ADMIN')) {
return true; // agree
// returning integer 1 means the same
}
return false; // disagree
// returning integer -1 means the same
}
}
Create an instance of AccessResolver and add voters to it, (*6)
$postEditVoter = new PostEditVoter();
// create more voters if you like
$resolver = new AccessResolver();
$resolver->addVoter($postEditVoter); // You can pass method name as second parameter. It defaults to `isGranted`
// add more voters if you like
Get your user from somewhere, (*7)
$user = $this->getUser();
And ask for permission like that:, (*8)
$resolver->isGranted($user, 'post_edit');
// or maybe $resolver->isGranted($user, $postEditTask);
Wallogit.com
