src/Listener/RedirectListener.php line 41

Open in your IDE?
  1. <?php
  2. /**
  3.  * Created by PhpStorm.
  4.  * User: frup64362
  5.  * Date: 07/10/2016
  6.  * Time: 11:56
  7.  */
  9. namespace App\Listener;
  12. use App\Entity\RefRole;
  13. use App\Entity\UtilisateurInformation;
  14. use App\Services\JsonResults;
  15. use Doctrine\ORM\EntityManagerInterface;
  16. use Symfony\Component\DependencyInjection\ContainerInterface;
  17. use Symfony\Component\HttpFoundation\RedirectResponse;
  18. use Symfony\Component\HttpFoundation\Response;
  19. use Symfony\Component\HttpFoundation\Session\Session;
  20. use Symfony\Component\HttpKernel\Event\GetResponseEvent;
  21. use Symfony\Component\Serializer\Encoder\JsonDecode;
  22. use Symfony\Component\Serializer\Encoder\JsonEncode;
  23. use Symfony\Component\Serializer\Encoder\JsonEncoder;
  24. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  25. class RedirectListener implements EventSubscriberInterface
  26. {
  27.     /**
  28.      * @var JsonEncoder
  29.      */
  30.     private $jsonEncoder;
  32.     public function __construct(private readonly ContainerInterface $container, private readonly EntityManagerInterface $entityManager)
  33.     {
  34.     }
  35.     public static function getSubscribedEvents()
  36.     {
  37.         return [
  38.             RequestEvent::class => 'onKernelRequest',
  39.         ];
  40.     }
  41.     public function onKernelRequest(\Symfony\Component\HttpKernel\Event\RequestEvent $event)
  42.     {
  43.         $userConnected = $this->container->get('security.token_storage')->getToken();
  44.         $user = $userConnected ? $userConnected->getUser() : null;
  46.         $url = ["api_liste_rendezvous", "api_get_odm", "ctsweb_affichage_evenement", "api_liste_conge"];
  47.         if (in_array($event->getRequest()->attributes->get('_route'), $url)) {
  48.             $idCts = $event->getRequest()->attributes->get('idUser');
  49.             if ($idCts != 0) {
  50.                 if ($user->getUtilisateur()->getIdRole() != RefRole::ROLE_CTS || $user->getUtilisateur()->getIdRole() != 12) {
  51.                     $listCts = $this->entityManager->getRepository(UtilisateurInformation::class)->findMyCts($idCts, $user);
  52.                     if ((is_countable($listCts) ? count($listCts) : 0) == 0) {
  53.                         $data = ['success' => false, 'data' => 'access denied'];
  54.                         $event->setResponse(new Response($this->container->get('jms_serializer')->serialize($data, 'json')));
  55.                     }
  56.                 } else {
  57.                     $data = ['success' => false, 'data' => 'access denied'];
  58.                     $event->setResponse(new Response($this->container->get('jms_serializer')->serialize($data, 'json')));
  59.                 }
  60.             }
  61.         }
  63.         // Droit d'accès d'un DS Lecteur
  64.         if ($user instanceof UtilisateurInformation && $user->getUtilisateur()->getIdRole() == RefRole::ROLE_LECTEUR) {
  65.             $current_url = $event->getRequest()->attributes->get('_route');
  66.             $denied_urls = ['ctsweb_informations_generales', 'ctsweb_ordres_de_missions', 'ctsweb_tout_om', 'actualite_cts', 'detail_cts_article'];
  67.             if (in_array($current_url, $denied_urls)) {
  68.                 $data = ['status' => 403, 'success' => false, 'data' => 'access denied'];
  69.                 $event->setResponse(new Response($this->container->get('jms_serializer')->serialize($data, 'json')));
  70.             }
  71.         }
  72.     }
  73. }