src/EventListener/GeneralListener.php line 59

Open in your IDE?
  1. <?php
  3. // src/EventListener/ExceptionListener.php
  4. namespace App\EventListener;
  6. use Symfony\Component\HttpFoundation\Response;
  7. use Symfony\Component\HttpKernel\Event\ExceptionEvent;
  8. use Symfony\Component\HttpKernel\Exception\HttpExceptionInterface;
  9. use Symfony\Component\HttpKernel\Event\ControllerEvent;
  10. use Symfony\Component\Security\Core\Security;
  11. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  14. class GeneralListener
  15. {
  16.    /* public function onKernelException(ExceptionEvent $event)
  17.     {
  18.         // You get the exception object from the received event
  19.         $exception = $event->getThrowable();
  20.         $message = sprintf(
  21.             'My Error says: %s with code: %s',
  22.             $exception->getMessage(),
  23.             $exception->getCode()
  24.         );
  26.         // Customize your response object to display the exception details
  27.         $response = new Response();
  28.         $response->setContent($message);
  30.         // HttpExceptionInterface is a special type of exception that
  31.         // holds status code and header details
  32.         if ($exception instanceof HttpExceptionInterface) {
  33.             $response->setStatusCode($exception->getStatusCode());
  34.             $response->headers->replace($exception->getHeaders());
  35.         } else {
  36.             $response->setStatusCode(Response::HTTP_INTERNAL_SERVER_ERROR);
  37.         }
  39.         // sends the modified response object to the event
  40.         $event->setResponse($response);
  41.     }
  42.     */
  43.     
  44.      public function onKernelController(ControllerEvent $event)
  45.      {
  46.            
  47.            $routeName = $event->getRequest()->get('_route');                                        
  48.            $checkWs = explode("_",$routeName);
  50.            if(str_replace("/","",$checkWs[0]) == 'ws' || $routeName == 'app_login' || $checkWs == 'homepage' || $routeName == "_wdt" || $routeName == "_profiler")
  51.            {
  52.                
  53.            } else {
  55.                if($routeName)
  56.                {
  57.                    
  58.                    $lastUsername = $event->getRequest()->getSession()->get(Security::LAST_USERNAME);
  59.                    $perms        = $event->getRequest()->getSession()->get($lastUsername."_perms");    
  60.     
  61.                    $routes       = [];
  62.                    if($perms)
  63.                    {
  64.                        
  65.                          $listArray  = ["_index","_new","_edit","_delete","_show"];
  66.                          $cleanRoute = $routeName; 
  67.                          foreach($listArray as $list)
  68.                          {
  69.                              $cleanRoute = str_replace($list, "", $cleanRoute);
  70.                          }
  71.                                                
  72.                        $hasAccess = 0;
  73.                        foreach($perms as $perm)
  74.                        {
  75.                            
  76.                             $cleanCurrentRoute = $perm['url_access'];                             
  77.                             foreach($listArray as $list)
  78.                             {
  79.                                  $cleanCurrentRoute = str_replace($list, "", $cleanCurrentRoute);
  80.                             }                           
  82.                           if($cleanCurrentRoute == $cleanRoute)
  83.                           {         
  84.                                                                               
  85.                                 $routes[] = $cleanRoute."_index";                       
  86.                                
  87.                               if($perm['write_permission'] == 1)
  88.                               {
  89.                                   $routes[] = $cleanRoute."_new";
  90.                               };      
  91.                               if($perm['edit_permission'] == 1)
  92.                               {
  93.                                   $routes[] = $cleanRoute."_edit";
  94.                               };                            
  95.                               if($perm['delete_permission'] == 1)
  96.                               {
  97.                                   $routes[] = $cleanRoute."_delete";
  98.                               };                            
  99.                               if($perm['read_permission'] == 1)
  100.                               {
  101.                                   $routes[] = $cleanRoute."_show";
  102.                               };    
  103.                                 
  104.                           }                                            
  105.                        }        
  106.                                                 
  107.                        if(in_array($routeName, $routes))
  108.                        {
  109.                            $hasAccess++;
  110.                        }                                                             
  111.                        
  112.                        if($hasAccess == 0)
  113.                        {
  114.                            throw new AccessDeniedHttpException('Se requiere autorización para ingresar a esta sección');
  115.                        }                   
  116.                    }
  117.                    
  118.                }
  119.                
  120.            }
  122.            
  124.      }    
  125. }