added configurable permission system (#424)

src/EventSubscriber/UserPreferenceSubscriber.php

@@ -11,6 +11,7 @@ namespace App\EventSubscriber;
 
 use App\Entity\User;
 use App\Entity\UserPreference;
+use App\Event\PrepareUserEvent;
 use App\Event\UserPreferenceEvent;
 use App\Form\Type\CalendarViewType;
 use App\Form\Type\LanguageType;
@@ -19,15 +20,10 @@ use Symfony\Component\EventDispatcher\EventDispatcherInterface;
 use Symfony\Component\EventDispatcher\EventSubscriberInterface;
 use Symfony\Component\Form\Extension\Core\Type\CheckboxType;
 use Symfony\Component\Form\Extension\Core\Type\IntegerType;
-use Symfony\Component\Form\Extension\Core\Type\TimezoneType;
-use Symfony\Component\HttpKernel\Event\KernelEvent;
-use Symfony\Component\HttpKernel\KernelEvents;
 use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
+use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
 use Symfony\Component\Validator\Constraints\Range;
 
-/**
- * Class UserPreferenceSubscriber
- */
 class UserPreferenceSubscriber implements EventSubscriberInterface
 {
     /**
@@ -35,20 +31,26 @@ class UserPreferenceSubscriber implements EventSubscriberInterface
      */
     protected $eventDispatcher;
 
+    /**
+     * @var AuthorizationCheckerInterface
+     */
+    protected $voter;
+
     /**
      * @var TokenStorageInterface
      */
     protected $storage;
 
     /**
-     * UserPreferenceSubscriber constructor.
      * @param EventDispatcherInterface $dispatcher
      * @param TokenStorageInterface $storage
+     * @param AuthorizationCheckerInterface $voter
      */
-    public function __construct(EventDispatcherInterface $dispatcher, TokenStorageInterface $storage)
+    public function __construct(EventDispatcherInterface $dispatcher, TokenStorageInterface $storage, AuthorizationCheckerInterface $voter)
     {
         $this->eventDispatcher = $dispatcher;
         $this->storage = $storage;
+        $this->voter = $voter;
     }
 
     /**
@@ -57,27 +59,37 @@ class UserPreferenceSubscriber implements EventSubscriberInterface
     public static function getSubscribedEvents(): array
     {
         return [
-            KernelEvents::CONTROLLER => ['loadUserPreferences', 200]
+            PrepareUserEvent::PREPARE => ['loadUserPreferences', 200]
         ];
     }
 
     /**
+     * @param User $user
      * @return UserPreference[]
      */
-    public function getDefaultPreferences()
+    public function getDefaultPreferences(User $user)
     {
+        $enableHourlyRate = false;
+
+        if ($this->voter->isGranted('hourly-rate', $user)) {
+            $enableHourlyRate = true;
+        }
+
+        /*
+            (new UserPreference())
+                ->setName('timezone')
+                ->setValue(date_default_timezone_get())
+                ->setType(TimezoneType::class),
+        */
+
         return [
             (new UserPreference())
                 ->setName(UserPreference::HOURLY_RATE)
                 ->setValue(0)
                 ->setType(IntegerType::class)
+                ->setEnabled($enableHourlyRate)
                 ->addConstraint(new Range(['min' => 0])),
-/*
-            (new UserPreference())
-                ->setName('timezone')
-                ->setValue(date_default_timezone_get())
-                ->setType(TimezoneType::class),
-*/
+
             (new UserPreference())
                 ->setName('language')
                 ->setValue('en') // TODO fetch from services.yaml
@@ -116,31 +128,32 @@ class UserPreferenceSubscriber implements EventSubscriberInterface
     }
 
     /**
-     * @param KernelEvent $event
+     * @param PrepareUserEvent $event
      */
-    public function loadUserPreferences(KernelEvent $event)
+    public function loadUserPreferences(PrepareUserEvent $event)
     {
         if (!$this->canHandleEvent($event)) {
             return;
         }
 
-        /** @var User $user */
-        $user = $this->storage->getToken()->getUser();
+        $user = $event->getUser();
 
         $prefs = [];
         foreach ($user->getPreferences() as $preference) {
             $prefs[$preference->getName()] = $preference;
         }
 
-        $event = new UserPreferenceEvent($user, $this->getDefaultPreferences());
+        $event = new UserPreferenceEvent($user, $this->getDefaultPreferences($user));
         $this->eventDispatcher->dispatch(UserPreferenceEvent::CONFIGURE, $event);
 
         foreach ($event->getPreferences() as $preference) {
+            /* @var UserPreference[] $prefs */
             if (isset($prefs[$preference->getName()])) {
                 /* @var UserPreference $pref */
                 $prefs[$preference->getName()]
                     ->setType($preference->getType())
                     ->setConstraints($preference->getConstraints())
+                    ->setEnabled($preference->isEnabled())
                 ;
             } else {
                 $prefs[$preference->getName()] = $preference;
@@ -151,24 +164,15 @@ class UserPreferenceSubscriber implements EventSubscriberInterface
     }
 
     /**
-     * @param KernelEvent $event
+     * @param PrepareUserEvent $event
      * @return bool
      */
-    protected function canHandleEvent(KernelEvent $event): bool
+    protected function canHandleEvent(PrepareUserEvent $event): bool
     {
-        // Ignore sub-requests
-        if (!$event->isMasterRequest()) {
+        if (null === ($user = $event->getUser())) {
             return false;
         }
 
-        // ignore events like the toolbar where we do not have a token
-        if (null === $this->storage->getToken()) {
-            return false;
-        }
-
-        /** @var User $user */
-        $user = $this->storage->getToken()->getUser();
-
         return ($user instanceof User);
     }
 }