bundles/BackofficeBundle/Security/Authorization/Voter/OrderVoter.php line 37

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. /**
  6. * OrderVoter.php File.
  7. * This file is part of the Payment.net Project.
  8. *
  9. * PHP version 5
  10. *
  11. * @category Application
  12. * @package Bdm\BackofficeBundle\Security\Authorization\Voter
  13. * @author Pavel Baraulya <pbaraulya@bdmultimedia.fr>
  14. * @link http://www.payment.net/
  15. *
  16. * FEATURES :
  17. * ==========
  18. *
  19. * TODO-LIST :
  20. * ===========
  21. *
  22. * HISTORY :
  23. * =========
  24. * 20150709 - Pavel Baraulya
  25. *
  26. **/
  27. namespace Bdm\BackofficeBundle\Security\Authorization\Voter;
  29. use Bdm\BackofficeBundle\Entity\Application;
  30. use Bdm\BackofficeBundle\Entity\Merchant;
  31. use Bdm\CheckoutBundle\Entity\Order;
  32. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  34. /**
  35. * Voter for order entity
  36. */
  37. class OrderVoter extends AbstractVoter
  38. {
  39. /**
  40. * @param string $sAttribute attribute
  41. * @param mixed $oSubject subject
  42. * @return bool
  43. */
  44. #[\Override]
  45. public function supports($sAttribute, $oSubject)
  46. {
  47. return $oSubject instanceof Order && parent::supports($sAttribute, $oSubject);
  48. }
  50. /**
  51. * @param string $sAttr attr
  52. * @param mixed $mEntity entity
  53. * @param TokenInterface $oToken token
  54. *
  55. * @return bool
  56. */
  57. protected function voteOnAttribute($sAttr, $mEntity, TokenInterface $oToken)
  58. {
  59. $oUser = $oToken->getUser();
  60. if (!$oUser instanceof Merchant) {
  61. return false;
  62. }
  64. return (bool) $this->findByOwner($oUser->getId(), $mEntity->getId());
  65. }
  67. /**
  68. * Find entity by owner id
  69. *
  70. * @param int $iOwnerId owner id
  71. * @param int $iEntityId entity id
  72. *
  73. * @return mixed
  74. * @throws \Doctrine\ORM\NonUniqueResultException
  75. */
  76. protected function findByOwner($iOwnerId, $iEntityId)
  77. {
  78. $oQuery = $this->oEm->createQuery('
  79. SELECT o FROM ' . Order::class . ' o
  80. WHERE o.oApplication IN (
  81. SELECT a.iId FROM ' . Application::class . ' a
  82. WHERE a.oMerchant = :owner_id
  83. ) AND o.iId = :entity_id
  84. ');
  85. $oQuery->setParameters(['owner_id' => $iOwnerId, 'entity_id' => $iEntityId]);
  86. return $oQuery->getOneOrNullResult();
  87. }
  88. }