<?php declare(strict_types=1);

namespace App\Engine\AdministratorUser;

final readonly class AccessControl
{

    public function __construct(
        private \Symfony\Bundle\SecurityBundle\Security $security,
    ) {
    }

    public function isCurrentUserAuthorizedToManageAccessMethodsOfPassedUser(int $managedUserId): bool
    {
        return $this->provideLoggedInUser()->getId() === $managedUserId || $this->security->isGranted(\App\Engine\Security\Role::SUPER_ADMINISTRATOR->value);
    }

    public function isCurrentUserAuthorizedToManageRoles(): bool
    {
        return $this->provideLoggedInUser()->isSystemAdministrator() || $this->security->isGranted(\App\Engine\Security\Role::SUPER_ADMINISTRATOR->value);
    }

    private function provideLoggedInUser(): AdministratorUser
    {
        /** @var \App\Engine\AdministratorUser\AdministratorUser $user */
        $user = $this->security->getUser();
        return $user;
    }

}