Advanced configuration

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

namespace App\Route;

use Sonata\AdminBundle\Builder\RouteBuilderInterface;
use Sonata\AdminBundle\Admin\AdminInterface;
use Sonata\AdminBundle\Route\PathInfoBuilder;
use Sonata\AdminBundle\Route\RouteCollectionInterface;

final class EntityRouterBuilder implements RouteBuilderInterface
{
    private PathInfoBuilder $pathInfoBuilder;

    public function __construct(PathInfoBuilder $pathInfoBuilder)
    {
        $this->pathInfoBuilder = $pathInfoBuilder;
    }

    public function build(AdminInterface $admin, RouteCollectionInterface $collection)
    {
        $this->pathInfoBuilder->build($admin, $collection);

        $collection->add('yourSubAction');

        // The create button will disappear, delete functionality will be disabled as well
        // No more changes needed!
        $collection->remove('create');
        $collection->remove('delete');
    }
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

// src/Admin/PersonAdmin.php

protected function configureFormFields(FormMapper $form): void
{
    $subject = $this->getSubject();

    $form
        ->add('name')
    ;

    if ($subject instanceof Teacher) {
        $form->add('course', 'text');
    }
    elseif ($subject instanceof Student) {
        $form->add('year', 'integer');
    }
}

1
2
3
4
5
6
7
8
9
10
11
12
13

public function configureActionButtons(AdminInterface $admin, array $list, string $action, ?object $object = null): array
{
    if (in_array($action, ['show', 'edit', 'acl']) && $object) {
        $buttonList['custom'] = [
            'template' => '@App/Button/custom_button.html.twig',
        ];
    }

    // Remove history action
    unset($buttonList['history']);

    return $buttonList;
}

1
2
3
4
5
6
7
8
9
10
11
12

// src/Admin/CustomAdmin.php

final class CustomAdmin extends AbstractAdmin
{
    protected function getAccessMapping(): array
    {
        return [
            'myCustomFoo' => 'EDIT',
            'myCustomBar' => ['EDIT', 'LIST'],
        ];
    }
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

// src/Controller/CustomCRUDController.php

final class CustomCRUDController extends CRUDController
{
    public function myCustomFooAction(): Response
    {
        $this->admin->checkAccess('myCustomFoo');
        // If you can't access to EDIT role for the linked admin, an AccessDeniedException will be thrown

        // ...
    }

    public function myCustomBarAction($object): Response
    {
        $this->admin->checkAccess('myCustomBar', $object);
        // If you can't access to EDIT AND LIST roles for the linked admin, an AccessDeniedException will be thrown

        // ...
    }
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

// src/Security/Handler/CustomSecurityHandler.php

use Sonata\AdminBundle\Security\Handler\SecurityHandlerInterface;

final class CustomSecurityHandler implements SecurityHandlerInterface
{
    public function isGranted(AdminInterface $admin, $attributes, ?object $object = null): bool
    {
        return $this->customAccessLogic();
    }

    public function getBaseRole(AdminInterface $admin): string
    {
        return '';
    }

    public function buildSecurityInformation(AdminInterface $admin): array
    {
        return [];
    }

    public function createObjectSecurity(AdminInterface $admin, object $object): void
    {
    }

    public function deleteObjectSecurity(AdminInterface $admin, object $object): void
    {
    }
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

// src/Security/Handler/CustomSecurityHandler.php

use Sonata\AdminBundle\Security\Handler\SecurityHandlerInterface;

final class CustomSecurityHandler implements SecurityHandlerInterface
{
    private SecurityHandlerInterface $defaultSecurityHandler;

    public function __construct(SecurityHandlerInterface $defaultSecurityHandler)
    {
        $this->defaultSecurityHandler = $defaultSecurityHandler;
    }

    public function isGranted(AdminInterface $admin, $attributes, ?object $object = null): bool
    {
        // Custom access logic
        if (...) {
            return false;
        }

        // Default access logic
        return $this->defaultSecurityHandler->isGranted($admin, $attributes, $object);
    }

    // ...
}