fix: add missing access checks

2026-09-16 18:03:04 +02:00
parent d4908b6ab9
commit 5c57dc823f
12 changed files with 16 additions and 1 deletions
@@ -8,6 +8,7 @@ use App\Repository\UploadRepository;
 use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
 use Symfony\Component\HttpFoundation\Response;
 use Symfony\Component\Routing\Attribute\Route;
+use Symfony\Component\Security\Http\Attribute\IsGranted;

 class IndexController extends AbstractController
 {
@@ -18,6 +19,7 @@ class IndexController extends AbstractController
    }

    #[Route('/management', name: 'app_manager_index')]
+    #[IsGranted('ROLE_MANAGER')]
    public function index(): Response
    {
        $dispositions = $this->dispositionRepository->getNew();