<?php
// src/Security/AbonnementVoter.php
namespace App\Security;
use App\Entity\User;
use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
use Symfony\Component\Security\Core\Authorization\Voter\Voter;
class AbonnementVoter extends Voter
{
protected function supports(string $attribute, $subject): bool
{
// On utilise un attribut custom "ACCESS_ADMIN"
return $attribute === 'ACCESS_ADMIN';
}
protected function voteOnAttribute(string $attribute, $subject, TokenInterface $token): bool
{
$user = $token->getUser();
if (!$user instanceof User) {
return false;
}
// Vérifie rôle et abonnement
return in_array('ROLE_ADMIN', $user->getRoles(), true)
&& $user->isOkAbonnement();
}
}