final class FooVoter extends Voter
{
    public const string EDIT = 'edit';

    public function __construct(
        private readonly AuthorizationCheckerInterface $authorizationChecker,
    ) {
    }

    protected function supports(string $attribute, mixed $subject): bool
    {
        if (!$subject instanceof Foo) {
            return false;
        }

        return \in_array($attribute, [self::EDIT], true);
    }

    /**
     * @param Foo $subject
     */
    protected function voteOnAttribute(string $attribute, mixed $subject, TokenInterface $token, ?Vote $vote = null): bool
    {
        $currentUser = $token->getUser();

        // the user must be logged in; if not, deny permission
        if (!$currentUser instanceof User) {
            return false;
        }

        return match ($attribute) {
            self::EDIT => $this->isEditable($currentUser, $subject),
            default => false,
        };
    }
    
    private function isEditable(User $currentUser, Foo $subject): bool
    {
        if ($this->authorizationChecker->isGranted('ROLE_SUPER_ADMIN')) {
            // Super admin always has access
            return true;
        }

        return $subject->getOwner() === $currentUser;
    }
}