feat: admin-managed roles and hotel codes

src/Controller/Admin/User/EditController.php

@@ -0,0 +1,76 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Controller\Admin\User;
+
+use App\Controller\Traits\ReturnUrlTrait;
+use App\Entity\User;
+use App\Form\Admin\UserType;
+use App\Htmx\HxRedirectResponse;
+use App\Security\Role;
+use Doctrine\ORM\EntityManagerInterface;
+use Psr\Log\LoggerInterface;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\Form\FormError;
+use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpFoundation\Response;
+use Symfony\Component\Routing\Attribute\Route;
+use Symfony\Component\Security\Http\Attribute\IsGranted;
+
+#[IsGranted('ROLE_ADMIN')]
+class EditController extends AbstractController
+{
+    use ReturnUrlTrait;
+
+    public function __construct(
+        private readonly EntityManagerInterface $entityManager,
+        private readonly LoggerInterface $logger,
+    ) {
+    }
+
+    #[Route('/admin/user/{id}/edit', name: 'app_admin_user_edit')]
+    public function index(User $user, Request $request): Response
+    {
+        $previousRoles = $user->getRoles();
+        $previousHotelCodes = $user->getHotelCodes();
+
+        $form = $this->createForm(UserType::class, $user, ['hx_post' => $request->getRequestUri()]);
+        $form->handleRequest($request);
+
+        if ($form->isSubmitted() && $form->isValid()) {
+            if ($this->locksOutSelf($user)) {
+                $form->get('roles')->addError(new FormError('Du kannst dir die Rolle Administration nicht selbst entziehen.'));
+
+                return $this->render('admin/user/modal_edit.html.twig', [
+                    'user' => $user,
+                    'form' => $form,
+                ]);
+            }
+
+            $this->entityManager->flush();
+
+            $this->addFlash('success', 'Der Benutzeraccount wurde aktualisiert');
+
+            $this->logger->info('Updated user permissions', [
+                'email' => $user->getEmail(),
+                'previousRoles' => $previousRoles,
+                'roles' => $user->getRoles(),
+                'previousHotelCodes' => $previousHotelCodes,
+                'hotelCodes' => $user->getHotelCodes(),
+            ]);
+
+            return new HxRedirectResponse($this->getReturnUrl($request, 'app_admin_user'));
+        }
+
+        return $this->render('admin/user/modal_edit.html.twig', [
+            'user' => $user,
+            'form' => $form,
+        ]);
+    }
+
+    private function locksOutSelf(User $user): bool
+    {
+        return $user === $this->getUser() && false === \in_array(Role::ADMIN, $user->getRoles(), true);
+    }
+}

src/Controller/Admin/User/FilterController.php

@@ -26,7 +26,6 @@ class FilterController extends AbstractController
             UserFilterType::class,
             new UserFilterDto(),
             'app_admin_user',
-            ['roles' => UserFilterType::ROLES],
         );
 
         return $this->render('admin/_modal_filter.html.twig', [

src/Controller/Admin/User/IndexController.php

@@ -36,7 +36,6 @@ class IndexController extends AbstractController
             UserFilterType::class,
             $filter,
             'app_admin_user',
-            ['roles' => UserFilterType::ROLES],
         );
 
         $pagination = $this->paginator->paginate(