EP/myep-team
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: limit access for role manager to assignment details

Browse Source
This commit is contained in:
Björn Fromme
2024-02-28 12:27:09 +01:00
parent e8fa3faac2
commit e0522bdf53
3 changed files with 113 additions and 102 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Security/Voter/DispositionVoter.php
+8 -3
View File
@@ -46,14 +46,19 @@ class DispositionVoter extends Voter
$disposition = $subject;
return match ($attribute) {
static::VIEW, static::EDIT, static::CONTRACT, static::INVOICE => $this->assertAdministrativeAccess($token) || $this->assertTeamerAccess($token, $disposition),
static::DELETE => $this->assertAdministrativeAccess($token),
static::VIEW, static::EDIT, static::CONTRACT, static::INVOICE => $this->assertAdministrativeAccess() || $this->assertTeamerAccess($token, $disposition),
static::DELETE => $this->assertAdminAccess(),
static::FEEDBACK => $this->assertHouseManagerAccess($token, $disposition),
default => false,
};
}
private function assertAdministrativeAccess(TokenInterface $token): bool
private function assertAdminAccess(): bool
{
return $this->security->isGranted('ROLE_ADMIN');
}
private function assertAdministrativeAccess(): bool
{
return $this->security->isGranted('ROLE_ADMINISTRATIVE');
}