src/Profile/EventSubscriber/AccessDeniedSubscriber.php line 32

Open in your IDE?
  1. <?php
  3. namespace App\Profile\EventSubscriber;
  5. use App\Profile\LinkGenerator\ProfileLinkGenerator;
  6. use App\Profile\Model\Profile;
  7. use App\Profile\Model\ProfileRoles;
  8. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  9. use Symfony\Component\HttpFoundation\RedirectResponse;
  10. use Symfony\Component\HttpKernel\Event\ExceptionEvent;
  11. use Symfony\Component\HttpKernel\KernelEvents;
  12. use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
  13. use Symfony\Component\Security\Core\Exception\AccessDeniedException;
  14. use Symfony\Component\Security\Core\Security;
  16. class AccessDeniedSubscriber implements EventSubscriberInterface
  17. {
  18.   public function __construct(
  19.     private ProfileLinkGenerator $profileLinkGenerator,
  20.     private UrlGeneratorInterface $urlGenerator,
  21.     private Security $security,
  22.   ) {
  23.   }
  25.   public static function getSubscribedEvents(): array
  26.   {
  27.     return [
  28.             KernelEvents::EXCEPTION => ['onKernelException', 2],
  29.         ];
  30.   }
  32.   public function onKernelException(ExceptionEvent $event)
  33.   {
  34.     $exception = $event->getThrowable();
  35.     if (!$exception instanceof AccessDeniedException) {
  36.       return;
  37.     }
  38.     $conditions = $exception->getAttributes();
  39.     // dd($this->accessMap->getPatterns($event->getRequest()));
  41.     if (in_array('IS_ANONYMOUS', $conditions)) {
  42.       /** @var Profile */
  43.       $user = $this->security->getUser();
  44.       $event->setResponse(new RedirectResponse($this->profileLinkGenerator->generate($user)));
  45.     } elseif (in_array(ProfileRoles::ROLE_USER, $conditions)) {
  46.       $event->setResponse(new RedirectResponse($this->urlGenerator->generate('auth_login')));
  47.     } elseif (in_array('ROLE_PIMCORE_USER', $conditions)) {
  48.       $event->setResponse(new RedirectResponse('/admin/login'));
  49.     }
  50.   }
  51. }