src/Security/Voters/PriceInquiryVoter.php line 15

Open in your IDE?
  1. <?php
  3. namespace App\Security\Voters;
  5. use App\Entity\PriceInquiry;
  6. use App\Entity\CustomerQuotations;
  7. use App\Entity\User;
  9. use App\Service\Api\CountriesService;
  10. use App\Service\Constants\Defaults;
  11. use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
  12. use Symfony\Component\Security\Core\Authorization\Voter\Voter;
  13. use Symfony\Component\Security\Core\Security;
  15. class PriceInquiryVoter extends Voter
  16. {
  17.     private Security $security;
  18.     private CountriesService $countriesService;
  19.     public const CAN_EDIT                   = 'inquiry.can_edit';
  21.     public const CAN_FILL_INQUIRY           = 'inquiry.can.fill';
  22.     public const CAN_SEE_PRICES             = 'inquiry.can.see_prices';
  23.     public const CAN_UPDATE                 = 'inquiry.can_update';
  24.     public const CAN_SEND_NOTIFICATION      = 'inquiry.can.send_notification';
  25.     public const CAN_BE_SHOWN_IN_PROPOSAL   = 'inquiry.can.be_shown_in_proposal';
  26.     public const CAN_BE_REJECTED            = 'inquiry.can.be_rejected';
  27.     public const CAN_BE_DUPLICATED          = 'inquiry.can.be_duplicated';
  28.     public const CAN_CHANGE_COMMISSION      = 'inquiry.commission.can_change';
  29.     public const CAN_VERIFY_MFM             = 'inquiry.can.verify';
  30.     public const CAN_VERIFY_SM              = 'inquiry.can.verify.sm';
  31.     public const CAN_UPDATE_CUSTOMER_PRICES = 'inquiry.can.update.customer.prices';
  32.     public const CAN_UPDATE_MF_PRICES       = 'inquiry.can.update.mf.prices';
  33.     public const CAN_OPEN_PRICES_FORM       = 'inquiry.can.open.prices.form';
  34.     public const CAN_REMOVE_MFM_VERIFICATION        = 'inquiry.can.remove_mfm_verification';
  35.     public const CAN_REMOVE_SM_VERIFICATION         = 'inquiry.can.remove_sm_verification';
  36.     public const CAN_UPDATE_CUSTOMS_PRICES = 'inquiry.can.update.customs.prices';
  38.     private const ATTRIBUTES = [
  39.         self::CAN_EDIT,
  40.         self::CAN_FILL_INQUIRY,
  41.         self::CAN_SEE_PRICES,
  42.         self::CAN_UPDATE,
  43.         self::CAN_SEND_NOTIFICATION,
  44.         self::CAN_BE_SHOWN_IN_PROPOSAL,
  45.         self::CAN_BE_REJECTED,
  46.         self::CAN_BE_DUPLICATED,
  47.         self::CAN_CHANGE_COMMISSION,
  48.         self::CAN_VERIFY_MFM,
  49.         self::CAN_VERIFY_SM,
  50.         self::CAN_UPDATE_CUSTOMER_PRICES,
  51.         self::CAN_UPDATE_MF_PRICES,
  52.         self::CAN_OPEN_PRICES_FORM,
  53.         self::CAN_REMOVE_MFM_VERIFICATION,
  54.         self::CAN_REMOVE_SM_VERIFICATION,
  55.         self::CAN_UPDATE_CUSTOMS_PRICES,
  56.     ];
  58.     public function __construct(
  59.         Security $security,
  60.         CountriesService $countriesService
  61.     )
  62.     {
  63.         $this->security = $security;
  64.         $this->countriesService = $countriesService;
  65.     }
  67.     protected function supports($attribute, $subject): bool
  68.     {
  69.         return in_array($attribute, self::ATTRIBUTES);
  70.     }
  72.     protected function voteOnAttribute($attribute, $subject, TokenInterface $token): bool
  73.     {
  74.         $user = $token->getUser();
  76.         switch ($attribute) {
  77.             case self::CAN_EDIT:
  78.                 return $this->canEdit($subject);
  79.             case self::CAN_FILL_INQUIRY:
  80.                 return $this->canBeFilled($subject);
  81.             case self::CAN_SEE_PRICES:
  82.                 return $this->canSeePrices($subject, $user);
  83.             case self::CAN_UPDATE:
  84.                 return $this->canUpdate($subject, $user);
  85.             case self::CAN_SEND_NOTIFICATION:
  86.                 return $this->canSendNotification($subject);
  87.             case self::CAN_BE_SHOWN_IN_PROPOSAL:
  88.                 return $this->canBeShownInProposal($subject);
  89.             case self::CAN_BE_REJECTED:
  90.                 return $this->canBeRejected($subject);
  91.             case self::CAN_BE_DUPLICATED:
  92.                 return $this->canBeDuplicated($subject);
  93.             case self::CAN_CHANGE_COMMISSION:
  94.                 return $this->canChangeCommission($subject);
  95.             case self::CAN_VERIFY_MFM:
  96.                 return $this->canVerifyMFM($subject);
  97.             case self::CAN_VERIFY_SM:
  98.                 return $this->canVerifySM($subject);
  99.             case self::CAN_UPDATE_CUSTOMER_PRICES:
  100.                 return $this->canUpdateCustomerPrices($subject);
  101.             case self::CAN_UPDATE_CUSTOMS_PRICES:
  102.                 return $this->canUpdateCustomsPrices($subject);
  103.             case self::CAN_UPDATE_MF_PRICES:
  104.                 return $this->canUpdateManufacturerPrices($subject);
  105.             case self::CAN_OPEN_PRICES_FORM:
  106.                 return $this->canOpenPricesForm($subject);
  107.             case self::CAN_REMOVE_MFM_VERIFICATION:
  108.                 return $this->canRemoveMfmVerification($subject);
  109.             case self::CAN_REMOVE_SM_VERIFICATION:
  110.                 return $this->canRemoveSmVerification($subject);
  111.         }
  113.         throw new \LogicException('Invalid attribute: '.$attribute);
  114.     }
  116.     private function canEdit(PriceInquiry $inquiry): bool
  117.     {
  118.         if ( !$this->security->isGranted('ROLE_CAN_CREATE_INQUIRIES') ) {
  119.             return false;
  120.         }
  122.         // temporary disabled. 27.01.21 / Ivars
  123.         /*
  124.         if ( $inquiry->getOfferVerifiedSM() ) {
  125.             return false;
  126.         }
  127.         */
  129.         return true;
  130.     }
  132.     private function canUpdate(PriceInquiry $inquiry): bool
  133.     {
  134.         if (in_array($inquiry->getQuotation()->getStatus(), [CustomerQuotations::STATUS_REJECTED])) {
  135.             return false;
  136.         }
  138.         if ( $this->security->isGranted('ROLE_INQUIRY_UPDATE') ) {
  139.             return true;
  140.         }
  142.         return false;
  143.     }
  145.     private function canBeFilled(PriceInquiry $inquiry): bool
  146.     {
  148.         if ( in_array($inquiry->getStatus(),[PriceInquiry::STATUS_DRAFT,PriceInquiry::STATUS_SENT,PriceInquiry::STATUS_OPEN]) ) {
  149.             return true;
  150.         }
  152.         return false;
  153.     }
  155.     private function canBeRejected(PriceInquiry $inquiry): bool
  156.     {
  158.         if ($inquiry->getStatus() == PriceInquiry::STATUS_OPEN) {
  159.             return true;
  160.         }
  162.         if ($inquiry->getStatus() == PriceInquiry::STATUS_OFFER && $this->canUpdate($inquiry)) {
  163.             return true;
  164.         }
  166.         return false;
  167.     }
  169.     private function canSeePrices(PriceInquiry $inquiry, $user): bool
  170.     {
  171.         if (!$user instanceof User) {
  172.             // the user must be logged in; if not, deny access
  173.             return false;
  174.         }
  176.         return true;
  177.     }
  179.     private function canSendNotification(PriceInquiry $inquiry): bool
  180.     {
  181.         if ( !$this->security->isGranted('ROLE_MANUFACTURING_MANAGER') ) {
  182.             return false;
  183.         }
  185.         if ( !in_array($inquiry->getStatus(), [PriceInquiry::STATUS_OFFER]) ) {
  186.             return false;
  187.         }
  189.         if ( !in_array($inquiry->getQuotation()->getStatus(), [CustomerQuotations::STATUS_INQUIRIES_SENT, CustomerQuotations::STATUS_OFFERS_RECEIVED, CustomerQuotations::STATUS_OFFERS_PARTIALLY_RECEIVED]) ) {
  190.             return false;
  191.         }
  193.         return true;
  195.     }
  197.     private function canBeShownInProposal(PriceInquiry $inquiry): bool
  198.     {
  199.         if ($inquiry->getHideInProposal()) {
  200.             return false;
  201.         }
  203.         if ($inquiry->getOfferVerified() === false) {
  204.             return false;
  205.         }
  207.         if (!$this->security->isGranted('ROLE_SALES_MANAGER') && !$inquiry->getOfferVerifiedSM()) {
  208.             return false;
  209.         }
  211.         //if delivery prices are greater then 0
  212.         if ($inquiry->getIsDeliveryPrices()) {
  213.             return true;
  214.         }
  216.         return false;
  217.     }
  219.     private function canBeDuplicated(PriceInquiry $inquiry): bool
  220.     {
  222.         if( !in_array($inquiry->getQuotation()->getStatus(), [CustomerQuotations::STATUS_INQUIRIES_SENT, CustomerQuotations::STATUS_OFFERS_RECEIVED, CustomerQuotations::STATUS_OFFERS_PARTIALLY_RECEIVED, CustomerQuotations::STATUS_PROPOSAL_SENT]) ) {
  223.             return false;
  224.         }
  226.         if ($inquiry->getStatus() === PriceInquiry::STATUS_OFFER) {
  227.             return true;
  228.         }
  230.         return false;
  231.     }
  233.     private function canChangeCommission(PriceInquiry $inquiry): bool
  234.     {
  235.         if ( !$this->security->isGranted('ROLE_CAN_CHANGE_OFFER_COMMISSION') ) {
  236.             return false;
  237.         }
  239.         $quotation = $inquiry->getQuotation();
  241.         if ( !$this->security->isGranted('quotation.commission.can_change', $quotation) ) {
  242.             return false;
  243.         }
  245.         return true;
  246.     }
  247.   
  248.     private function canVerifyMFM(PriceInquiry $inquiry): bool
  249.     {
  250.         if ( !$this->security->isGranted('ROLE_MANUFACTURING_MANAGER') ) {
  251.             return false;
  252.         }
  254.         if ( $inquiry->getOfferVerified() ) {
  255.             return false;
  256.         }
  258.         if ( !in_array($inquiry->getStatus(), [PriceInquiry::STATUS_OFFER, PriceInquiry::STATUS_ACCEPTED]) ) {
  259.             return false;
  260.         }
  262.         if ( !$inquiry->getCommission() ) {
  263.             return false;
  264.         }
  266.         if ( !$inquiry->getIsDeliveryPrices() ) {
  267.             return false;
  268.         }
  270.         return true;
  271.     }
  273.     private function canVerifySM(PriceInquiry $inquiry): bool
  274.     {
  275.         if ( !$this->security->isGranted('ROLE_SALES_MANAGER') ) {
  276.             return false;
  277.         }
  279.         if ( !$inquiry->getOfferVerified() ) {
  280.             return false;
  281.         }
  283.         if ( $inquiry->getOfferVerifiedSM() ) {
  284.             return false;
  285.         }
  287.         if ( !in_array($inquiry->getStatus(), [PriceInquiry::STATUS_OFFER, PriceInquiry::STATUS_ACCEPTED]) ) {
  288.             return false;
  289.         }
  291.         return true;
  292.     }
  294.     private function canUpdateCustomerPrices(PriceInquiry $inquiry) : bool
  295.     {
  296.         if ( !$inquiry->getCustomerPriceOffer() ) {
  297.             return false;
  298.         }
  300.         if ( $inquiry->getOfferVerifiedSM() ) {
  301.             return false;
  302.         }
  304.         if ( $this->security->isGranted('ROLE_SALES_MANAGER') || $this->security->isGranted('ROLE_SUPER_PRICE_EDITOR')) {
  305.             return true;
  306.         }
  307.         return false;
  308.     }
  310.     private function canUpdateManufacturerPrices(PriceInquiry $inquiry) : bool
  311.     {
  312.         if ( !in_array($inquiry->getStatus(), [PriceInquiry::STATUS_OFFER, PriceInquiry::STATUS_ACCEPTED]) ) {
  313.             return false;
  314.         }
  316.         if ( $inquiry->getOfferVerified() ) {
  317.             return false;
  318.         }
  320.         if ( $this->security->isGranted('ROLE_MANUFACTURING_MANAGER') || $this->security->isGranted('ROLE_SUPER_PRICE_EDITOR')) {
  321.             return true;
  322.         }
  324.         return false;
  325.     }
  327.     private function canOpenPricesForm(PriceInquiry $inquiry) : bool
  328.     {
  329.         if ( in_array($inquiry->getStatus(), [PriceInquiry::STATUS_DRAFT]) ) {
  330.             return false;
  331.         }
  333.         // commenting this out allowing open price form for fully accepted offers, so managers can see comission. 29.01.22 / Ivars
  334.         /*
  335.         if ( $this->canUpdateCustomerPrices($inquiry) || $this->canUpdateManufacturerPrices($inquiry) ) {
  336.             return true;
  337.         }
  338.         */
  340.         return true;
  341.     }
  343.     private function canRemoveMfmVerification(PriceInquiry $inquiry) : bool
  344.     {
  345.         // MFM verification cant be removed if there are active SM verification
  346.         if ( $inquiry->getOfferVerifiedSM() ) {
  347.             return false;
  348.         }
  350.         // if its already an order - cant update
  351.         if ( $inquiry->getOrderQuotation() ) {
  352.             return false;
  353.         }
  355.         if ( !$this->security->isGranted('ROLE_INQUIRY_CAN_REMOVE_MFM_VERIFY') ) {
  356.             return false;
  357.         }
  359.         return true;
  360.     }
  362.     private function canRemoveSmVerification(PriceInquiry $inquiry) : bool
  363.     {
  364.         // can be removed only if its verified before
  365.         if ( !$inquiry->getOfferVerifiedSM() ) {
  366.             return false;
  367.         }
  369.         // if its already an order - cant update
  370.         if ( $inquiry->getOrderQuotation() ) {
  371.             return false;
  372.         }
  374.         if ( !$this->security->isGranted('ROLE_INQUIRY_CAN_REMOVE_SM_VERIFY') ) {
  375.             return false;
  376.         }
  378.         return true;
  379.     }
  381.     private function canUpdateCustomsPrices(PriceInquiry $inquiry): bool
  382.     {
  383.         if ( !$inquiry->getCustomerPriceOffer() || !$inquiry->getCustomerDeliveryPrices() ) {
  384.             return false;
  385.         }
  386.         $pickupAddressDetails = $inquiry->getManufacturerAddress();
  387.         $deliveryAddress = $inquiry->getQuotation()->getDeliveryAddress();
  388.         if (
  389.             $this->countriesService->isInsideEu($pickupAddressDetails['country'] ?? Defaults::DEFAULT_COUNTRY_CODE) &&
  390.             $this->countriesService->isInsideEu($deliveryAddress['country'] ?? Defaults::DEFAULT_COUNTRY_CODE)
  391.         ) {
  392.             return false;
  393.         }
  395.         return true;
  396.     }
  399. }