function commerce_sagepay_abort_access in Drupal Commerce SagePay Integration 7

Determines access to the abort form for SagePay.

Parameters

commerce_order $order: The order the transaction is on.

commerce_payment_transaction $transaction: The payment transaction object to be aborted.

Return value

bool TRUE or FALSE indicating abort access.

1 string reference to 'commerce_sagepay_abort_access'

commerce_sagepay_menu in ./commerce_sagepay.module

Implements hook_menu().

File

./commerce_sagepay.module, line 357

Code

function commerce_sagepay_abort_access($order, $transaction) {
  global $user;

  // Return FALSE if the transaction isn't for SagePay Server or Direct.
  if ($transaction->payment_method != 'commerce_sagepay_server' && $transaction->payment_method != 'commerce_sagepay_direct') {
    return FALSE;
  }
  if ($transaction->remote_status != SAGEPAY_REMOTE_STATUS_DEFERRED && $transaction->remote_status != SAGEPAY_REMOTE_STATUS_REPEAT_DEFERRED) {
    return FALSE;
  }

  // check SagePay Payment permission
  if (!user_access('sagepay abort payment', $user)) {
    return FALSE;
  }

  // Allow access if the user can update payments on this order.
  return commerce_payment_transaction_access('update', $order, $user);
}