bundles/OAuth2Bundle/Security/Authorization/Voter/AccessTokenVoter.php line 36

Open in your IDE?
  1. <?php
  3. declare(strict_types=1);
  5. /**
  6. * AccessTokenVoter.php File.
  7. * This file is part of the Payment.net Project.
  8. *
  9. * PHP version 5
  10. *
  11. * @category Application
  12. * @package Bdm\BackofficeBundle\Security\Authorization\Voter
  13. * @author Alexandr Bakurin <abakurin@bdmultimedia.fr>
  14. * @link http://www.payment.net/
  15. *
  16. * FEATURES :
  17. * ==========
  18. *
  19. * TODO-LIST :
  20. * ===========
  21. *
  22. * HISTORY :
  23. * =========
  24. * 20151021 - Alexandr Bakurin
  25. */
  26. namespace Bdm\OAuth2Bundle\Security\Authorization\Voter;
  28. use Bdm\OAuth2Bundle\Entity\AccessToken;
  29. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  30. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  31. use Symfony\Component\Security\Core\User\UserInterface;
  33. /**
  34. * AccessTokenVoter
  35. */
  36. class AccessTokenVoter extends Voter
  37. {
  38. const DELETE = 'DELETE';
  40. /**
  41. * @param string $sAttribute attribute
  42. * @param mixed $oSubject subject
  43. * @return bool
  44. */
  45. public function supports($sAttribute, $oSubject)
  46. {
  47. if ($sAttribute !== self::DELETE) {
  48. return false;
  49. }
  51. if ($oSubject instanceof AccessToken) {
  52. return true;
  53. }
  55. return false;
  56. }
  58. /**
  59. * Check if has access
  60. *
  61. * @param string $aAttr attr
  62. * @param object $mEntity entity
  63. * @param null $oUser user
  64. *
  65. * @return bool
  66. */
  67. /**
  68. * @param string $sAttribute attribute
  69. * @param object $mEntity application
  70. * @param TokenInterface $oToken token
  71. * @return bool
  72. */
  73. protected function voteOnAttribute($sAttribute, $mEntity, TokenInterface $oToken)
  74. {
  75. $oUser = $oToken->getUser();
  76. if (!$oUser instanceof UserInterface) {
  77. return false;
  78. }
  80. if ($mEntity->getClient()->getMerchant() === $oUser) {
  81. return true;
  82. }
  84. return false;
  85. }
  86. }