API Platform for Symfony allows you to use Voters in order to grant or deny access to your ressources, as described in their docs.
However all example are using magic val