/** * Step action */ public function stepAction() { if (!$this->isAllowed()) { $this->getResponse()->setStatusCode(403); return; } return parent::stepAction(); }