src/BillingBundle/Security/InvoiceVoter.php line 16

Open in your IDE?
  1. <?php
  3. namespace BillingBundle\Security;
  5. use AppBundle\Entity\User;
  6. use BillingBundle\Entity\Invoice;
  7. use BillingBundle\Enum\InvoiceStatusEnum;
  8. use BillingBundle\Enum\PayableInvoiceStatusEnum;
  9. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  10. use Symfony\Component\Security\Core\Authorization\AccessDecisionManagerInterface;
  11. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. /**
  14.  * Class InvoiceVoter
  15.  */
  16. class InvoiceVoter extends Voter
  17. {
  18.     const EDIT = 'EDIT';
  19.     const VIEW = 'VIEW';
  20.     const SAVE_TO_DRIVE = 'SAVE_TO_DRIVE';
  21.     const CAN_UPDATE_STATUS_IN_PAYED = 'CAN_UPDATE_STATUS_IN_PAYED';
  22.     const CAN_UPDATE_STATUS_IN_WAITING_FOR_PAYMENT = 'CAN_UPDATE_STATUS_IN_WAITING_FOR_PAYMENT';
  24.     /**
  25.      * @var AccessDecisionManagerInterface
  26.      */
  27.     private $decisionManager;
  29.     /**
  30.      * DocumentWorkflowVoter constructor.
  31.      * @param AccessDecisionManagerInterface $decisionManager
  32.      */
  33.     public function __construct(
  34.         AccessDecisionManagerInterface $decisionManager
  35.     ) {
  36.         $this->decisionManager = $decisionManager;
  37.     }
  39.     /**
  40.      * {@inheritdoc}
  41.      */
  42.     protected function supports($attribute, $subject)
  43.     {
  44.         return $subject instanceof Invoice && in_array($attribute, [
  45.             self::EDIT,
  46.             self::VIEW,
  47.             self::SAVE_TO_DRIVE,
  48.             self::CAN_UPDATE_STATUS_IN_PAYED,
  49.             self::CAN_UPDATE_STATUS_IN_WAITING_FOR_PAYMENT,
  50.         ], true);
  51.     }
  53.     /**
  54.      * {@inheritdoc}
  55.      * @param Invoice $subject
  56.      */
  57.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token)
  58.     {
  59.         $user = $token->getUser();
  61.         if (!$user instanceof User) {
  62.             return false;
  63.         }
  65.         switch ($attribute) {
  66.             case self::EDIT:
  67.                 return InvoiceStatusEnum::DRAFT === $subject->getStatus();
  68.             case self::VIEW:
  69.                 return InvoiceStatusEnum::DRAFT !== $subject->getStatus();
  70.             case self::SAVE_TO_DRIVE:
  71.                 return in_array($subject->getStatus(), PayableInvoiceStatusEnum::getInvoicesWithPdfStatuses());
  72.             case self::CAN_UPDATE_STATUS_IN_PAYED:
  73.                 return $this->canUpdateStatusInPayed($subject, $token);
  74.             case self::CAN_UPDATE_STATUS_IN_WAITING_FOR_PAYMENT:
  75.                 return $this->canUpdateStatusInWaitingForPayment($subject, $token);
  76.             default:
  77.                 return false;
  78.         }
  79.     }
  81.     /**
  82.      * Check whether invoice can be updated in waiting for payment status or not
  83.      *
  84.      * @param Invoice $invoice
  85.      * @param TokenInterface $token
  86.      * @return boolean
  87.      */
  88.     protected function canUpdateStatusInWaitingForPayment(Invoice $invoice, TokenInterface $token)
  89.     {
  90.         if (!$this->decisionManager->decide($token, ['ROLE_VALIDATE_INVOICE'])) {
  91.             return false;
  92.         }
  94.         $canBeUpdated = true;
  95.         if (!(
  96.             !$invoice->isAsset() &&
  97.             ($invoice->isValidated() || ($invoice->isDraft() && $invoice->hasGeneratedFile())) &&
  98.             !$invoice->isFeePayedByTrust())
  99.         ) {
  100.             $canBeUpdated = false;
  101.         }
  103.         return $canBeUpdated;
  104.     }
  106.     /**
  107.      * Check whether invoice can be updated in payed status or not
  108.      *
  109.      * @param Invoice $invoice
  110.      * @param TokenInterface $token
  111.      * @return boolean
  112.      */
  113.     protected function canUpdateStatusInPayed(Invoice $invoice, TokenInterface $token)
  114.     {
  115.         if (!$this->decisionManager->decide($token, ['ROLE_VALIDATE_INVOICE'])) {
  116.             return false;
  117.         }
  119.         $canBeUpdated = true;
  120.         // Pour pouvoir passer en statut soldé il faut que la facture d'avoir
  121.         // soit validé ou en proforma avec le pdf généré
  123.         if (!(
  124.             ($invoice->isAsset() && ($invoice->isValidated() || ($invoice->isDraft() && $invoice->hasGeneratedFile()))) || ($invoice->isFeePayedByTrust() && ($invoice->isValidated() || ($invoice->isDraft() && $invoice->hasGeneratedFile())))
  125.             )) {
  126.             $canBeUpdated = false;
  127.         }
  129.         return $canBeUpdated;
  130.     }
  131. }