Chill-project/chill-bundles
6
0
Fork 0
mirror of https://gitlab.com/Chill-Projet/chill-bundles.git synced 2026-03-23 22:28:07 +00:00
Code Issues Actions Projects Releases Wiki Activity

Restrict "Tickets" menu item visibility based on user permissions

Browse Source 
- Added `Security` service to `SectionMenuBuilder` for access control.
- Display "Tickets" menu item only if the user has `TicketVoter::READ` permission.
This commit is contained in:
Julien Fastré
2026-03-23 13:36:54 +01:00
parent 8c80df77f6
commit 3c4c4ee542
1 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/Bundle/ChillTicketBundle/src/Menu/SectionMenuBuilder.php
View File

@@ -12,14 +12,20 @@ declare(strict_types=1);
namespace Chill\TicketBundle\Menu;
use Chill\MainBundle\Routing\LocalMenuBuilderInterface;
use Chill\TicketBundle\Security\Voter\TicketVoter;
use Knp\Menu\MenuItem;
use Symfony\Component\Security\Core\Security;
class SectionMenuBuilder implements LocalMenuBuilderInterface
final readonly class SectionMenuBuilder implements LocalMenuBuilderInterface
{
public function __construct(private Security $security) {}
public function buildMenu($menuId, MenuItem $menu, array $parameters)
{
$menu->addChild('Tickets', ['route' => 'chill_ticket_ticket_list'])
->setExtras(['order' => 250]);
if ($this->security->isGranted(TicketVoter::READ)) {
$menu->addChild('Tickets', ['route' => 'chill_ticket_ticket_list'])
->setExtras(['order' => 250]);
}
}
public static function getMenuIds(): array