<?php

namespace Acme\DemoBundle\Security;

use Acme\DemoBundle\Entity\User;
use Symfony\Component\Security\Core\Authentication\Token\AnonymousToken;
use Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter;
use Symfony\Component\Security\Core\Role\Role;

/**
 * Convenience wrapper around the role hierarchy voter.
 */
class RoleHierarchyChecker extends RoleHierarchyVoter
{
    /**
     * Check whether a user is granted a specific role, respecting the role hierarchy.
     *
     * @return boolean Whether this user is granted the $requiredRole
     */
    public function check(User $user, $requiredRole)
    {
        $roles = array();
        foreach ($user->getRoles() as $roleName) {
            $roles[] = new Role($roleName);
        }

        $token = new AnonymousToken('dummy', 'dummy', $roles);

        return static::ACCESS_GRANTED == $this->vote($token, null, array($requiredRole));
    }
}