PermissionVoter

PermissionVoter.php

<?php
//...
class PermissionVoter implements VoterInterface
{
    //...

    /**
     * {@inheritdoc}
     */
    public function vote(TokenInterface $token, $object, array $attributes)
    {
        $result = VoterInterface::ACCESS_ABSTAIN;

        $configuredRoles = $this->getConfigurationRoleMap();
        $userRoles = $this->getUserRoles($token);

        foreach ($attributes as $attribute) {

            foreach ($configuredRoles as $configuredRole => $permissions) {
                if (!in_array(‘ROLE_’ . strtoupper($configuredRole), $userRoles)) {
                    continue;
                }

                $result = VoterInterface::ACCESS_DENIED;
                if (is_array($permissions) && in_array($attribute, $permissions)) {
                    return VoterInterface::ACCESS_GRANTED;
                }
            }
        }

        return $result;    
    }
}