Add user_is_granted() function to twig

natewiebe13 · Nate Wiebe · commit bf8a1bf7c2e1 · 2024-12-09T12:08:19.000-05:00
diff --git a/src/Symfony/Bridge/Twig/CHANGELOG.md b/src/Symfony/Bridge/Twig/CHANGELOG.md
@@ -1,6 +1,11 @@
 CHANGELOG
 =========
 
+7.3
+---
+
+ * Add `user_is_granted()` Twig function
+
 7.2
 ---
 
diff --git a/src/Symfony/Bridge/Twig/Extension/SecurityExtension.php b/src/Symfony/Bridge/Twig/Extension/SecurityExtension.php
@@ -13,7 +13,9 @@
 
 use Symfony\Component\Security\Acl\Voter\FieldVote;
 use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
+use Symfony\Component\Security\Core\Authorization\UserAuthorizationCheckerInterface;
 use Symfony\Component\Security\Core\Exception\AuthenticationCredentialsNotFoundException;
+use Symfony\Component\Security\Core\User\UserInterface;
 use Symfony\Component\Security\Http\Impersonate\ImpersonateUrlGenerator;
 use Twig\Extension\AbstractExtension;
 use Twig\TwigFunction;
@@ -28,6 +30,7 @@ final class SecurityExtension extends AbstractExtension
     public function __construct(
         private ?AuthorizationCheckerInterface $securityChecker = null,
         private ?ImpersonateUrlGenerator $impersonateUrlGenerator = null,
+        private ?UserAuthorizationCheckerInterface $userSecurityChecker = null,
     ) {
     }
 
@@ -84,6 +87,19 @@ public function getImpersonatePath(string $identifier): string
         return $this->impersonateUrlGenerator->generateImpersonationPath($identifier);
     }
 
+    public function userIsGranted(UserInterface $user, mixed $attribute, mixed $subject = null, ?string $field = null): bool
+    {
+        if (null === $this->userSecurityChecker) {
+            return false;
+        }
+
+        if (null !== $field) {
+            $subject = new FieldVote($subject, $field);
+        }
+
+        return $this->userSecurityChecker->userIsGranted($user, $attribute, $subject);
+    }
+
     public function getFunctions(): array
     {
         return [
@@ -92,6 +108,7 @@ public function getFunctions(): array
             new TwigFunction('impersonation_exit_path', $this->getImpersonateExitPath(...)),
             new TwigFunction('impersonation_url', $this->getImpersonateUrl(...)),
             new TwigFunction('impersonation_path', $this->getImpersonatePath(...)),
+            new TwigFunction('user_is_granted', $this->userIsGranted(...)),
         ];
     }
 }
diff --git a/src/Symfony/Bridge/Twig/UndefinedCallableHandler.php b/src/Symfony/Bridge/Twig/UndefinedCallableHandler.php
@@ -72,6 +72,7 @@ class UndefinedCallableHandler
         'preconnect' => 'web-link',
         'prefetch' => 'web-link',
         'prerender' => 'web-link',
+        'user_is_granted' => 'security-core',
         'workflow_can' => 'workflow',
         'workflow_transitions' => 'workflow',
         'workflow_transition' => 'workflow',
diff --git a/src/Symfony/Bundle/SecurityBundle/Resources/config/templating_twig.php b/src/Symfony/Bundle/SecurityBundle/Resources/config/templating_twig.php
@@ -26,6 +26,7 @@
             ->args([
                 service('security.authorization_checker')->ignoreOnInvalid(),
                 service('security.impersonate_url_generator')->ignoreOnInvalid(),
+                service('security.user_authorization_checker')->ignoreOnInvalid(),
             ])
             ->tag('twig.extension')
     ;

Original file line number	Diff line number	Diff line change
`@@ -26,6 +26,7 @@`
`26`	`26`	`->args([`
`27`	`27`	`service('security.authorization_checker')->ignoreOnInvalid(),`
`28`	`28`	`service('security.impersonate_url_generator')->ignoreOnInvalid(),`
	`29`	`+ service('security.user_authorization_checker')->ignoreOnInvalid(),`
`29`	`30`	`])`
`30`	`31`	`->tag('twig.extension')`
`31`	`32`	`;`