added team permissions (#996)

src/Voter/ActivityVoter.php

@@ -10,6 +10,7 @@
 namespace App\Voter;
 
 use App\Entity\Activity;
+use App\Entity\Team;
 use App\Entity\User;
 use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
 
@@ -65,6 +66,44 @@ class ActivityVoter extends AbstractVoter
             return false;
         }
 
-        return $this->hasRolePermission($user, $attribute . '_activity');
+        if ($this->hasRolePermission($user, $attribute . '_activity')) {
+            return true;
+        }
+
+        $project = $subject->getProject();
+        if (null === $project) {
+            return false;
+        }
+
+        $hasTeamleadPermission = $this->hasRolePermission($user, $attribute . '_teamlead_activity');
+        $hasTeamPermission = $this->hasRolePermission($user, $attribute . '_team_activity');
+
+        if (!$hasTeamleadPermission && !$hasTeamPermission) {
+            return false;
+        }
+
+        /** @var Team $team */
+        foreach ($project->getTeams() as $team) {
+            if ($hasTeamleadPermission && $user->isTeamleadOf($team)) {
+                return true;
+            }
+
+            if ($hasTeamPermission && $user->isInTeam($team)) {
+                return true;
+            }
+        }
+
+        /** @var Team $team */
+        foreach ($project->getCustomer()->getTeams() as $team) {
+            if ($hasTeamleadPermission && $user->isTeamleadOf($team)) {
+                return true;
+            }
+
+            if ($hasTeamPermission && $user->isInTeam($team)) {
+                return true;
+            }
+        }
+
+        return false;
     }
 }