feat: gate functionality for customer expert users

2026-09-15 15:13:47 +02:00
parent 1d14f00bb7
commit a1d1fdde14
15 changed files with 55 additions and 43 deletions
@@ -17,8 +17,12 @@ security:
                        roles: [ ROLE_MAILJET_WEBHOOK ]

    role_hierarchy:
+        # ROLE_CUSTOMER_EXPERT gates the booking-draft and log surfaces, which used to be
+        # ROLE_ADMIN only. Inheriting it here is what keeps those surfaces open to administrators
+        # after the #[IsGranted] attributes moved to the narrower role.
        ROLE_ADMIN:
            - ROLE_GROUPS_ADMIN
+            - ROLE_CUSTOMER_EXPERT
        ROLE_GROUPS_ADMIN:
            - ROLE_GROUPS_MANAGER
    firewalls: