Phraseanet/lib/Alchemy/Phrasea/ACL/BasketACL.php

<?php

/*
 * This file is part of Phraseanet
 *
 * (c) 2005-2014 Alchemy
 *
 * For the full copyright and license information, please view the LICENSE
 * file that was distributed with this source code.
 */

namespace Alchemy\Phrasea\ACL;

use Alchemy\Phrasea\Model\Entities\Basket;
use Alchemy\Phrasea\Model\Entities\User;

class BasketACL
{
    public function hasAccess(Basket $basket, User $user)
    {
        if ($this->isOwner($basket, $user)) {
            return true;
        }

        if ($basket->getValidation()) {
            foreach ($basket->getValidation()->getParticipants() as $participant) {
                if ($participant->getUser()->getId() === $user->getId()) {
                    return true;
                }
            }
        }

        return false;
    }

    public function isOwner(Basket $basket, User $user)
    {
        return $basket->getUser()->getId() === $user->getId();
    }
}