Commit081b3c7

gondo

committed

cleaned up the code example

- added final return for `vote()` function- moved `$user` below attribute check. if attribute fails, we don't need user- used already declared constants in switch statement, rather than harcoded strings

1 parentbb39863 commit081b3c7Copy full SHA for 081b3c7

File tree

1 file changed

-5

lines changed

cookbook/security
- voters_data_permission.rst

1 file changed

-5

lines changed

`‎cookbook/security/voters_data_permission.rst‎`

Lines changed: 7 additions & 5 deletions

Original file line number	Diff line number	Diff line change
`@@ -108,36 +108,38 @@ edit a particular object. Here's an example implementation:`
`108`	`108`	`// set the attribute to check against`
`109`	`109`	`$attribute = $attributes[0];`
`110`	`110`
`111`		`- // get current logged in user`
`112`		`- $user = $token->getUser();`
`113`		`-`
`114`	`111`	`// check if the given attribute is covered by this voter`
`115`	`112`	`if (!$this->supportsAttribute($attribute)) {`
`116`	`113`	`return VoterInterface::ACCESS_ABSTAIN;`
`117`	`114`	`}`
`118`	`115`
	`116`	`+ // get current logged in user`
	`117`	`+ $user = $token->getUser();`
	`118`	`+`
`119`	`119`	`// make sure there is a user object (i.e. that the user is logged in)`
`120`	`120`	`if (!$user instanceof UserInterface) {`
`121`	`121`	`return VoterInterface::ACCESS_DENIED;`
`122`	`122`	`}`
`123`	`123`
`124`	`124`	`switch($attribute) {`
`125`		`- case'view':`
	`125`	`+ caseself::VIEW:`
`126`	`126`	`// the data object could have for example a method isPrivate()`
`127`	`127`	`// which checks the Boolean attribute $private`
`128`	`128`	`if (!$post->isPrivate()) {`
`129`	`129`	`return VoterInterface::ACCESS_GRANTED;`
`130`	`130`	`}`
`131`	`131`	`break;`
`132`	`132`
`133`		`- case'edit':`
	`133`	`+ caseself::EDIT:`
`134`	`134`	`// we assume that our data object has a method getOwner() to`
`135`	`135`	`// get the current owner user entity for this data object`
`136`	`136`	`if ($user->getId() === $post->getOwner()->getId()) {`
`137`	`137`	`return VoterInterface::ACCESS_GRANTED;`
`138`	`138`	`}`
`139`	`139`	`break;`
`140`	`140`	`}`
	`141`	`+`
	`142`	`+ return VoterInterface::ACCESS_DENIED;`
`141`	`143`	`}`
`142`	`144`	`}`
`143`	`145`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Commit081b3c7

File tree

1 file changed

1 file changed

`‎cookbook/security/voters_data_permission.rst‎`

0 commit comments