EP/myep-team
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: provide feedback as admin user

Browse Source
This commit is contained in:
Björn Fromme
2025-01-10 16:55:22 +01:00
parent 4cad1331ae
commit 55bd904df3
10 changed files with 32 additions and 34 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Security/Voter/DispositionVoter.php
+8 -4
View File
@@ -43,9 +43,10 @@ class DispositionVoter extends Voter
$disposition = $subject;
return match ($attribute) {
static::VIEW, static::EDIT, static::CONTRACT, static::INVOICE => $this->assertAdministrativeAccess() || $this->assertTeamerAccess($disposition),
static::VIEW, static::EDIT, static::CONTRACT, static::INVOICE => $this->assertAdministrativeAccess()
|| $this->assertTeamerAccess($token, $disposition),
static::DELETE => $this->assertAdminAccess(),
static::FEEDBACK => $this->assertHouseManagerAccess($token, $disposition),
static::FEEDBACK => $this->assertAdminAccess() || $this->assertHouseManagerAccess($token, $disposition),
default => false,
};
}
@@ -80,12 +81,15 @@ class DispositionVoter extends Voter
return $isMatchingHotel && $isPast;
}
private function assertTeamerAccess(Disposition $disposition): bool
private function assertTeamerAccess(TokenInterface $token, Disposition $disposition): bool
{
if (false === $this->security->isGranted('ROLE_TEAMER')) {
return false;
}
return $this->security->getUser()->getTeamer() === $disposition->getTeamer();
/** @var User $user */
$user = $token->getUser();
return $user->getTeamer() === $disposition->getTeamer();
}
}