From 3a5895e35652572f6298384a24ce9b90b0aa2035 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bj=C3=B6rn=20Fromme?= <fromme@dreipunktnull.com>
Date: Thu, 6 Aug 2026 11:18:38 +0200
Subject: [PATCH] feat: extended role hierarchy

---
 config/packages/security.yaml                           | 9 +++++++--
 src/BusProNet/XmlParser/CrmAttributesResponseParser.php | 1 -
 2 files changed, 7 insertions(+), 3 deletions(-)

diff --git a/config/packages/security.yaml b/config/packages/security.yaml
index 1386ffa..b654b14 100644
--- a/config/packages/security.yaml
+++ b/config/packages/security.yaml
@@ -15,9 +15,14 @@ security:
                     mailjet:
                         password: '%env(MAILJET_WEBHOOK_BASIC_PASSWORD)%'
                         roles: [ ROLE_MAILJET_WEBHOOK ]
+
     role_hierarchy:
-        ROLE_ADMIN: [ ROLE_GROUPS_ADMIN ]
-        ROLE_GROUPS_ADMIN: [ ROLE_GROUPS_MANAGER ]
+        ROLE_ADMIN:
+            - ROLE_GROUPS_ADMIN
+            - ROLE_HOUSE_MANAGER
+        ROLE_GROUPS_ADMIN:
+            - ROLE_GROUPS_MANAGER
+            -
     firewalls:
         dev:
             pattern: ^/(_(profiler|wdt)|css|images|js)/
diff --git a/src/BusProNet/XmlParser/CrmAttributesResponseParser.php b/src/BusProNet/XmlParser/CrmAttributesResponseParser.php
index f6c8a45..9af0ab1 100644
--- a/src/BusProNet/XmlParser/CrmAttributesResponseParser.php
+++ b/src/BusProNet/XmlParser/CrmAttributesResponseParser.php
@@ -51,7 +51,6 @@ class CrmAttributesResponseParser
                         }
                         if (self::BPN_CRM_ID_ADMIN === $attribute->id && true === $attribute->selected) {
                             $roles[] = 'ROLE_ADMIN';
-                            $roles[] = 'ROLE_HOUSE_MANAGER';
                         }
                         if (self::BPN_CRM_ID_MANAGER === $attribute->id && true === $attribute->selected) {
                             $roles[] = 'ROLE_MANAGER';