vendor/bundles/JMS/SecurityExtraBundle/Security/Authorization/Voter/IddqdVoter.php
changeset 0 7f95f8617b0b
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/vendor/bundles/JMS/SecurityExtraBundle/Security/Authorization/Voter/IddqdVoter.php	Sat Sep 24 15:40:41 2011 +0200
@@ -0,0 +1,61 @@
+<?php
+
+/*
+ * Copyright 2011 Johannes M. Schmitt <schmittjoh@gmail.com>
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+namespace JMS\SecurityExtraBundle\Security\Authorization\Voter;
+
+use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
+use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
+
+/**
+ * This voter adds a special role "IDDQD" which effectively bypasses any,
+ * and all security checks.
+ *
+ * Most of the time, you will want to use this rule in combination with a
+ * @RunAs annotation to disable security checks for the invocation of a
+ * specific method.
+ *
+ * @author Johannes M. Schmitt <schmittjoh@gmail.com>
+ */
+class IddqdVoter implements VoterInterface
+{
+    public function vote(TokenInterface $token, $object, array $attributes)
+    {
+        return $this->isIddqd($token) ? VoterInterface::ACCESS_GRANTED : VoterInterface::ACCESS_ABSTAIN;
+    }
+
+    protected function isIddqd(TokenInterface $token)
+    {
+        foreach ($token->getRoles() as $role) {
+            if ('IS_IDDQD' === $role->getRole()) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    public function supportsAttribute($attribute)
+    {
+        return true;
+    }
+
+    public function supportsClass($class)
+    {
+        return true;
+    }
+}
\ No newline at end of file