<?php
namespace App\Doctrine;
use App\Service\EntrepriseResolver;
use Doctrine\ORM\EntityManagerInterface;
use Symfony\Component\EventDispatcher\EventSubscriberInterface;
use Symfony\Component\HttpKernel\Event\RequestEvent;
use Symfony\Component\HttpKernel\KernelEvents;
use Symfony\Component\Security\Core\Security;
/**
* Active TenantFilter pour la requête HTTP courante, une fois l'utilisateur
* authentifié (priorité < 8 : après le firewall).
*/
class TenantFilterSubscriber implements EventSubscriberInterface
{
private $entityManager;
private $security;
private $entrepriseResolver;
public function __construct(EntityManagerInterface $entityManager, Security $security, EntrepriseResolver $entrepriseResolver)
{
$this->entityManager = $entityManager;
$this->security = $security;
$this->entrepriseResolver = $entrepriseResolver;
}
public static function getSubscribedEvents(): array
{
return [KernelEvents::REQUEST => ['onKernelRequest', 5]];
}
public function onKernelRequest(RequestEvent $event): void
{
if (!$event->isMainRequest()) {
return;
}
$filters = $this->entityManager->getFilters();
if ($filters->isEnabled('tenant')) {
$filters->disable('tenant');
}
if (!$this->security->getUser() || $this->security->isGranted('ROLE_ADMIN')) {
return;
}
$owner = $this->entrepriseResolver->getOwnerUser();
// Sans propriétaire résolu, on filtre sur un id impossible : aucune donnée.
$filters->enable('tenant')->setParameter('owner_id', $owner ? $owner->getId() : 0);
}
}