chore: cleanup after master flatten rewrite
This commit is contained in:
@@ -886,10 +886,9 @@ Keys stored in `config/secret/` directory.
|
||||
|
||||
**Location:** `src/Security/Voter/BookingVoter.php`
|
||||
|
||||
| Operation | Requirements |
|
||||
|-----------|--------------|
|
||||
| `VIEW` | User owns booking (addressId match) |
|
||||
| `EDIT` | User owns booking AND booking is editable |
|
||||
This voter currently exists as legacy authorization logic and is not actively invoked by booking controllers.
|
||||
|
||||
Current booking routes (`/bookings/*`) are guarded with `ROLE_USER`, while final document access checks are enforced by BusProNet.
|
||||
|
||||
### 7.4 OAuth2
|
||||
|
||||
|
||||
@@ -21,7 +21,6 @@ class BookingsParser extends AbstractParser
|
||||
$booking = new Booking();
|
||||
|
||||
$booking->id = $this->getIntOrNullValue($node->filterXPath('//id'));
|
||||
$booking->applicantId = $this->getIntOrNullValue($node->filterXPath('//idadresse_anmelder'));
|
||||
$booking->bookingNumber = $this->getIntOrNullValue($node->filterXPath('//vorgangsnummer'));
|
||||
$booking->status = $this->getStringOrNullValue($node->filterXPath('//status'));
|
||||
$booking->participantCount = $this->getIntOrNullValue($node->filterXPath('//personen'));
|
||||
|
||||
Reference in New Issue
Block a user