Update

Author: PanzerLlama

Extension/LlamaMenuExtension.php

@@ -30,13 +30,20 @@ public function menuRender($menu, $options = array())
                 throw new \Exception(sprintf('Menu class "%s" does not exist.', $className));
             }
             $menu  = new $className($options);
-        } elseif ($options) {
-            $menu->setOptions($options);
+        }
+
+        if ($options)
+        {
+            foreach ($options as $k => $v)
+            {
+                $menu->setOption($k, $v);
+            }
         }
         return $this->menuService->renderView($menu);        
     }
 
-	public function getName() {
+	public function getName()
+    {
 		return 'panzer_llama_llama_menu_extension';
 	}	
 }

Model/LlamaMenu.php

@@ -4,7 +4,7 @@
 class LlamaMenu
 {        
     protected $elements = array();
-    protected $options;
+    protected $options  = array();
 
     public function __construct(array $options = array())
     {
@@ -29,6 +29,12 @@ public function getOptions()
     {
         return $this->options;
     }
+
+    public function setOption($name, $value)
+    {
+        $this->options[$name] = $value;
+        return $this;
+    }
 
     public function getOption($name)
     {

Model/LlamaMenuElement.php

@@ -13,14 +13,16 @@ class LlamaMenuElement
     private $level = 1;
     private $menu;
     private $parent;
+    private $required_permissions;
 
     private $classes    = array();
     private $elements   = array();
 
     private $isRouted   = false;
     private $isActive   = false;
     private $isDisabled = false;
-    
+    private $isRendered = true;
+
     public function setName($v)
     {
         $this->name = $v;
@@ -254,5 +256,27 @@ public function getClasses()
             $this->addClass($this->getMenu()->getOption('disabledClass'));
         }
         return $this->classes;
-    } 
+    }
+
+    public function setRequiredPermissions($requiredFlag)
+    {
+        $this->required_permissions = $requiredFlag;
+        return $this;
+    }
+
+    public function getRequiredPermissions()
+    {
+        return $this->required_permissions;
+    }
+
+    public function setIsRendered($v)
+    {
+        $this->isRendered = $v;
+        return $this;
+    }
+
+    public function getIsRendered()
+    {
+        return $this->isRendered;
+    }
 }

Resources/config/services.yml

@@ -1,7 +1,12 @@
 services:       
     llama.menu.service:
         class: PanzerLlama\LlamaMenuBundle\Service\LlamaMenuService
-        arguments: ["@twig", "@router", "@request_stack"]
+        arguments:
+          - "@twig"
+          - "@router"
+          - "@request_stack"
+          - "@security.authorization_checker"
+          - "@security.token_storage"
 
     twig.llama.menu.extension:
         class: PanzerLlama\LlamaMenuBundle\Extension\LlamaMenuExtension

Service/LlamaMenuService.php

@@ -1,8 +1,11 @@
 <?php
 namespace PanzerLlama\LlamaMenuBundle\Service;
 
+use AdminBundle\Entity\User;
 use Symfony\Bundle\FrameworkBundle\Routing\Router;
 use Symfony\Component\HttpFoundation\RequestStack;
+use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage;
+use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
 
 use Twig_Environment as Twig;
 
@@ -15,13 +18,17 @@ class LlamaMenuService
 	private $twig;
     private $router;
     private $requestStack;
-    //private $security;
+    private $authorizationChecker;
+    private $tokenStorage;
 
-	public function __construct(Twig $twig, Router $router, RequestStack $requestStack)
+	public function __construct(Twig $twig, Router $router, RequestStack $requestStack, AuthorizationCheckerInterface $authorizationChecker, TokenStorage $tokenStorage)
 	{
-        $this->twig         = $twig;
-        $this->router       = $router;
-        $this->requestStack = $requestStack;
+        $this->twig                 = $twig;
+        $this->router               = $router;
+        $this->requestStack         = $requestStack;
+        $this->authorizationChecker = $authorizationChecker;
+        $this->tokenStorage         = $tokenStorage;
+        $this->user                 = $this->tokenStorage->getToken() ? $this->tokenStorage->getToken()->getUser() : null;
 	}
 
     public function renderView(LlamaMenu $menu)
@@ -31,7 +38,8 @@ public function renderView(LlamaMenu $menu)
     }
 
     private function prepareMenu(LlamaMenu $menu, $route)
-    {        
+    {
+        /** @var LlamaMenuElement $e */
         foreach ($menu->getElements() as $e)
         {
             $this->prepareMenuElement($e, $route);
@@ -40,6 +48,14 @@ private function prepareMenu(LlamaMenu $menu, $route)
 
     private function prepareMenuElement(LlamaMenuElement $menuElement, $route)
     {
+        if ($menuElement->getRequiredPermissions())
+        {
+            if (!$this->user instanceof User || $this->authorizationChecker->isGranted($menuElement->getRequiredPermissions(), $this->user) === false)
+            {
+                $menuElement->setIsRendered(false);
+            }
+        }
+
         $menuElement->addClass(sprintf('level-%s', $menuElement->getLevel()));       
 
         if ($menuElement->hasRoute($route))