PermissionUrlVoter

PermissionUrlVoter.php

<?php
//...
class PermissionUrlVoter implements VoterInterface
{
    //...

    /**
     * {@inheritdoc}
     */
    public function vote(TokenInterface $token, $object, array $attributes)
    {
        $result = VoterInterface::ACCESS_ABSTAIN;

        // only vote on Request objects inside this voter
        if (!$object instance Request) {
            return $result;
        }

        /** @var Request $request */
        $request = $object;

        $permissionKey = false;
        foreach ($this->permissionMap as $permission => $urlRegex) {
            if (preg_match(‘{‘.$urlRegex.’}’, rawurldecode($request->getPathInfo()))) {
                $permissionKey = $permission;
                break;
            }
        }

        if ($permissionKey === false) {
            return $result;
        }

        $configuredRoles = $this->getConfigurationRoleMap();
        $userRoles = $this->getUserRoles($token);

        foreach ($configuredRoles as $configuredRole => $permissions) {
            if (!in_array(‘ROLE_’ . strtoupper($configuredRole), $userRoles)) {
                continue;
            }

            $result = VoterInterface::ACCESS_DENIED;
            if (is_array($permissions) && in_array($permissionKey, $permissions)) {
                return VoterInterface::ACCESS_GRANTED;
            }
        }

        return $result;
    }

    //...
}