How to make a dynamic roles in symfony?

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

// src/Entity/Role.php

namespace AppEntity;

use DoctrineORMMapping as ORM;

/**
 * @ORMEntity()
 * @ORMTable(name="roles")
 */
class Role
{
    /**
     * @ORMId()
     * @ORMGeneratedValue()
     * @ORMColumn(type="integer")
     */
    private $id;

    /**
     * @ORMColumn(type="string", length=255, unique=true)
     */
    private $name;

    /**
     * @ORMColumn(type="string", length=255)
     */
    private $description;
   
    // getter and setter methods
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

// src/Form/RoleFormType.php

namespace AppForm;

use AppEntityRole;
use SymfonyComponentFormAbstractType;
use SymfonyComponentFormFormBuilderInterface;
use SymfonyComponentOptionsResolverOptionsResolver;

class RoleFormType extends AbstractType
{
    public function buildForm(FormBuilderInterface $builder, array $options)
    {
        $builder
            ->add('name')
            ->add('description');
    }

    public function configureOptions(OptionsResolver $resolver)
    {
        $resolver->setDefaults([
            'data_class' => Role::class,
        ]);
    }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

// src/Entity/User.php

// ...

use SymfonyBridgeDoctrineValidatorConstraintsUniqueEntity;
use DoctrineCommonCollectionsArrayCollection;
use DoctrineCommonCollectionsCollection;
use SymfonyComponentSecurityCoreUserUserInterface;

/**
 * @ORMEntity(repositoryClass=UserRepository::class)
 * @UniqueEntity(fields={"email"}, message="There is already an account with this email")
 */
class User implements UserInterface
{
    // ...
    
    /**
     * @ORMManyToMany(targetEntity=Role::class, inversedBy="users")
     * @ORMJoinTable(name="user_roles")
     */
    private $roles;
    
    public function __construct()
    {
        $this->roles = new ArrayCollection();
    }

    // ...
    
    public function getRoles(): array
    {
        $roles = $this->roles->map(function (Role $role) {
            return $role->getName();
        })->toArray();

        // guarantee every user at least has ROLE_USER
        $roles[] = 'ROLE_USER';

        return array_unique($roles);
    }
    
    // ...
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

# config/packages/security.yaml

security:
    # ...

    role_hierarchy:
        ROLE_ADMIN: ROLE_USER
        ROLE_SUPER_ADMIN: ROLE_ADMIN

    access_control:
        - { path: '^/admin', roles: ROLE_ADMIN }
        - { path: '^/super-admin', roles: ROLE_SUPER_ADMIN }
        - { path: '^/user', roles: ROLE_USER }
        # ...