summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRyan Weaver <ryan@thatsquality.com>2015-09-26 11:03:42 -0400
committerRyan Weaver <ryan@thatsquality.com>2015-09-26 17:07:41 -0400
commitaf905c55f14b63ef797cb23bb19dcdb5b0e2a3f0 (patch)
treed89f7cd556e491f46fa8be59825e0e3ea6774a1d
parent3679d74163401ee7e1362e42614f9fd2c9e1d9c4 (diff)
downloadsymfony-security-af905c55f14b63ef797cb23bb19dcdb5b0e2a3f0.zip
symfony-security-af905c55f14b63ef797cb23bb19dcdb5b0e2a3f0.tar.gz
symfony-security-af905c55f14b63ef797cb23bb19dcdb5b0e2a3f0.tar.bz2
Massively simplifying the BC and deprecated-throwing code thanks to suggestions by stof in #15870
-rw-r--r--Core/Authorization/Voter/AbstractVoter.php27
-rw-r--r--Core/Tests/Authorization/Voter/AbstractVoterTest.php38
2 files changed, 39 insertions, 26 deletions
diff --git a/Core/Authorization/Voter/AbstractVoter.php b/Core/Authorization/Voter/AbstractVoter.php
index 26e4e55..12b54db 100644
--- a/Core/Authorization/Voter/AbstractVoter.php
+++ b/Core/Authorization/Voter/AbstractVoter.php
@@ -70,12 +70,6 @@ abstract class AbstractVoter implements VoterInterface
$vote = self::ACCESS_ABSTAIN;
$class = get_class($object);
- $reflector = new \ReflectionMethod($this, 'voteOnAttribute');
- $isNewOverwritten = $reflector->getDeclaringClass()->getName() !== 'Symfony\Component\Security\Core\Authorization\Voter\AbstractVoter';
- if (!$isNewOverwritten) {
- @trigger_error(sprintf("The AbstractVoter::isGranted method is deprecated since 2.8 and won't be called anymore in 3.0. Override voteOnAttribute() instead.", $reflector->class), E_USER_DEPRECATED);
- }
-
foreach ($attributes as $attribute) {
if (!$this->supports($attribute, $class)) {
continue;
@@ -84,16 +78,9 @@ abstract class AbstractVoter implements VoterInterface
// as soon as at least one attribute is supported, default is to deny access
$vote = self::ACCESS_DENIED;
- if ($isNewOverwritten) {
- if ($this->voteOnAttribute($attribute, $object, $token)) {
- // grant access as soon as at least one voter returns a positive response
- return self::ACCESS_GRANTED;
- }
- } else {
- if ($this->isGranted($attribute, $object, $token->getUser())) {
- // grant access as soon as at least one voter returns a positive response
- return self::ACCESS_GRANTED;
- }
+ if ($this->voteOnAttribute($attribute, $object, $token)) {
+ // grant access as soon as at least one voter returns a positive response
+ return self::ACCESS_GRANTED;
}
}
@@ -191,7 +178,8 @@ abstract class AbstractVoter implements VoterInterface
*/
protected function isGranted($attribute, $object, $user = null)
{
- return false;
+ // forces isGranted() or voteOnAttribute() to be overridden
+ throw new \BadMethodCallException(sprintf('You must override the voteOnAttribute() method in "%s".', get_class($this)));
}
/**
@@ -211,6 +199,9 @@ abstract class AbstractVoter implements VoterInterface
*/
protected function voteOnAttribute($attribute, $object, TokenInterface $token)
{
- return false;
+ // the user should override this method, and not rely on the deprecated isGranted()
+ @trigger_error(sprintf("The AbstractVoter::isGranted() method is deprecated since 2.8 and won't be called anymore in 3.0. Override voteOnAttribute() in %s instead.", get_class($this)), E_USER_DEPRECATED);
+
+ return $this->isGranted($attribute, $object, $token->getUser());
}
}
diff --git a/Core/Tests/Authorization/Voter/AbstractVoterTest.php b/Core/Tests/Authorization/Voter/AbstractVoterTest.php
index 44da147..ea72e75 100644
--- a/Core/Tests/Authorization/Voter/AbstractVoterTest.php
+++ b/Core/Tests/Authorization/Voter/AbstractVoterTest.php
@@ -19,17 +19,10 @@ use Symfony\Component\Security\Core\Authorization\Voter\AbstractVoter;
*/
class AbstractVoterTest extends \PHPUnit_Framework_TestCase
{
- /**
- * @var AbstractVoter
- */
- private $voter;
-
private $token;
protected function setUp()
{
- $this->voter = new VoterFixture();
-
$tokenMock = $this->getMock('Symfony\Component\Security\Core\Authentication\Token\TokenInterface');
$tokenMock
->expects($this->any())
@@ -44,7 +37,9 @@ class AbstractVoterTest extends \PHPUnit_Framework_TestCase
*/
public function testVote($expectedVote, $object, $attributes, $message)
{
- $this->assertEquals($expectedVote, $this->voter->vote($this->token, $object, $attributes), $message);
+ $voter = new VoterFixture();
+
+ $this->assertEquals($expectedVote, $voter->vote($this->token, $object, $attributes), $message);
}
/**
@@ -58,6 +53,16 @@ class AbstractVoterTest extends \PHPUnit_Framework_TestCase
$this->assertEquals($expectedVote, $voter->vote($this->token, $object, $attributes), $message);
}
+ /**
+ * @group legacy
+ * @expectedException \BadMethodCallException
+ */
+ public function testNoOverriddenMethodsThrowsException()
+ {
+ $voter = new DeprecatedVoterNothingImplementedFixture();
+ $voter->vote($this->token, new ObjectFixture(), array('foo'));
+ }
+
public function getData()
{
return array(
@@ -113,6 +118,23 @@ class DeprecatedVoterFixture extends AbstractVoter
}
}
+class DeprecatedVoterNothingImplementedFixture extends AbstractVoter
+{
+ protected function getSupportedClasses()
+ {
+ return array(
+ 'Symfony\Component\Security\Core\Tests\Authorization\Voter\ObjectFixture',
+ );
+ }
+
+ protected function getSupportedAttributes()
+ {
+ return array('foo', 'bar', 'baz');
+ }
+
+ // this is a bad voter that hasn't overridden isGranted or voteOnAttribute
+}
+
class ObjectFixture
{
}