src/EventSubscriber/ParticipationSubscriber.php line 31

Open in your IDE?
  1. <?php
  3. namespace App\EventSubscriber;
  5. use ApiPlatform\Core\EventListener\EventPriorities;
  6. use App\Document\Participation;
  7. use Symfony\Component\EventDispatcher\EventSubscriberInterface;
  8. use Symfony\Component\HttpFoundation\ParameterBag;
  9. use Symfony\Component\HttpKernel\Event\ControllerEvent;
  10. use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
  11. use Symfony\Component\HttpKernel\KernelEvents;
  13. /**
  14.  * Class ParticipationSubscriber.
  15.  */
  16. class ParticipationSubscriber implements EventSubscriberInterface
  17. {
  19.     /**
  20.      * @return array
  21.      */
  22.     public static function getSubscribedEvents()
  23.     {
  24.         return [
  25.             KernelEvents::CONTROLLER => [
  26.                 ['hasFilter', EventPriorities::PRE_READ],
  27.             ]
  28.         ];
  29.     }
  31.     public function hasFilter(ControllerEvent $event)
  32.     {
  33.         $query = $event->getRequest()->query;
  34.         $resource = $event->getRequest()->attributes->get('_api_resource_class');
  35.         if (Participation::class !== $resource) {
  36.             return;
  37.         }
  39.         if (!$query instanceof ParameterBag) {
  40.             return;
  41.         }
  43.         if(is_null($query->get('operation_company_companyID'))){
  44.             throw new AccessDeniedHttpException('Can\'t request this route without company filter');
  45.         }
  47.     }
  48. }