ActionPermissionProvider.php

<?php

namespace Oro\Bundle\CalendarBundle\Datagrid;

use Oro\Bundle\CalendarBundle\Entity\Attendee;
use Oro\Bundle\DataGridBundle\Datasource\ResultRecordInterface;
use Oro\Bundle\SecurityBundle\Authentication\TokenAccessorInterface;
use Oro\Bundle\UserBundle\Entity\User;

class ActionPermissionProvider
{
    /** @var TokenAccessorInterface */
    protected $tokenAccessor;

    public function __construct(TokenAccessorInterface $tokenAccessor)
    {
        $this->tokenAccessor = $tokenAccessor;
    }

    /**
     * @param ResultRecordInterface $record
     * @return array
     */
    public function getInvitationPermissions(ResultRecordInterface $record)
    {
        /** @var User $user */
        $user                  = $this->tokenAccessor->getUser();
        $invitationStatus      = $record->getValue('invitationStatus');
        $parentId              = $record->getValue('parentId');
        $ownerId               = $record->getValue('ownerId');
        $relatedAttendeeUserId = $record->getValue('relatedAttendeeUserId');
        $isEditable            = (!$invitationStatus || ($invitationStatus && !$parentId));

        return [
            'accept'      => $this->isAvailableResponseButton(
                $user,
                $ownerId,
                $relatedAttendeeUserId,
                $invitationStatus,
                Attendee::STATUS_ACCEPTED
            ),
            'decline'     => $this->isAvailableResponseButton(
                $user,
                $ownerId,
                $relatedAttendeeUserId,
                $invitationStatus,
                Attendee::STATUS_DECLINED
            ),
            'tentative' => $this->isAvailableResponseButton(
                $user,
                $ownerId,
                $relatedAttendeeUserId,
                $invitationStatus,
                Attendee::STATUS_TENTATIVE
            ),
            'view'        => true,
            'update'      => $isEditable
        ];
    }

    /**
     * @param User $user
     * @param int $ownerId
     * @param int $relatedAttendeeUserId
     * @param string $invitationStatus
     * @param string $buttonStatus
     * @return bool
     */
    protected function isAvailableResponseButton(
        $user,
        $ownerId,
        $relatedAttendeeUserId,
        $invitationStatus,
        $buttonStatus
    ) {
        return $invitationStatus
            && $invitationStatus != $buttonStatus
            && $user->getId() == $ownerId
            && $user->getId() == $relatedAttendeeUserId;
    }
}