src/Bidcoz/Bundle/CoreBundle/Security/Authorization/Voter/RequireCcVoter.php line 17

Open in your IDE?
  1. <?php
  3. namespace Bidcoz\Bundle\CoreBundle\Security\Authorization\Voter;
  5. use Bidcoz\Bundle\CoreBundle\Entity\Campaign;
  6. use Bidcoz\Bundle\CoreBundle\Entity\PaymentGateway\Account\Account;
  7. use Bidcoz\Bundle\CoreBundle\Entity\User;
  8. use Bidcoz\Bundle\CoreBundle\Services\CreditCardManager;
  9. use RS\DiExtraBundle\Annotation as DI;
  10. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. /**
  14.  * @DI\Service
  15.  * @DI\Tag("security.voter")
  16.  */
  17. class RequireCcVoter extends Voter
  18. {
  19.     const WITH_CC = 'WITH_CC';
  21.     protected $ccManager;
  23.     /**
  24.      * @DI\InjectParams({
  25.      *      "ccManager" = @DI\Inject("credit_card_manager"),
  26.      * })
  27.      */
  28.     public function __construct(CreditCardManager $ccManager)
  29.     {
  30.         $this->ccManager = $ccManager;
  31.     }
  33.     protected function supports($attribute, $subject)
  34.     {
  35.         // if the attribute isn't one we support, return false
  36.         if (self::WITH_CC !== $attribute) {
  37.             return false;
  38.         }
  40.         // only vote on Campaign objects inside this voter
  41.         if (!$subject instanceof Campaign) {
  42.             return false;
  43.         }
  45.         return true;
  46.     }
  48.     /**
  49.      * @param string   $attribute
  50.      * @param Campaign $campaign
  51.      *
  52.      * @return bool
  53.      */
  54.     protected function voteOnAttribute($attribute, $campaign, TokenInterface $token)
  55.     {
  56.         $organization = $campaign->getOrganization();
  57.         //Stripe not enabled
  58.         if (!$organization->isStripeAllowed() || !$organization->hasPaymentGatewayAccountType(Account::STRIPE)) {
  59.             return true;
  60.         }
  61.         //Advance CC is not required
  62.         if (!$campaign->getCollectCcInfo()) {
  63.             return true;
  64.         }
  65.         $user = $token->getUser();
  67.         if (!$user instanceof User) {
  68.             // the user must be logged in; if not, deny access
  69.             return false;
  70.         }
  72.         return (bool) $this->ccManager->getCC($campaign, $user);
  73.     }
  74. }