...
    #[Route(
        '/api/v1/example',
        name: 'exampleMethod',
        methods: ['POST']
    )]
    #[IsGranted(
        'DTO',
        subject: 'exampleDTO',
    )]
    public function exampleMethod(#[MapRequestPayload] ExampleDTO $exampleDTO): Response {
...

#[DTO('example:permission')]
class ExampleDTO
{
    public function __construct(
        private int $id,
    ) {
    }

    public function getId(): int
    {
        return $this->id;
    }
}

#[Attribute(Attribute::TARGET_CLASS)]
final readonly class DTO
{
    /**
     * @param string[] | string $permissions
     */
    public function __construct(
        private array | string $permissions
    ) {
    }

    /**
     * @return string[] | string
     */
    public function getPermissions(): array | string
    {
        return $this->permissions;
    }
}

final class DTOVoter extends Voter
{
    /**
     * @param class-string|object $subject
     */
    protected function supports(string $attribute, mixed $subject): bool
    {
        // TODO: Check if attribute is of type DTO
        $class = new ReflectionClass($subject);

        /**
         * @var DTO[] $attributes
         */
        $attributes = $class->getAttributes(DTO::class, ReflectionAttribute::IS_INSTANCEOF);

        dump($subject);

        if ($attributes === []) {
            return false;
        }

       return true;
    }
...

if ($arguments[$subjectRef] instanceof MapRequestPayload) {
    return $arguments[$subjectRef]->metadata->getType();
}

return $arguments[$subjectRef];