From 428494ca1fe46cde4be97ad238b64447b41cc7cd Mon Sep 17 00:00:00 2001 From: Julie Lenaerts Date: Thu, 4 Jul 2024 11:38:41 +0200 Subject: [PATCH] Implement stored object permissions in serialization --- .../Serializer/Normalizer/StoredObjectNormalizer.php | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/src/Bundle/ChillDocStoreBundle/Serializer/Normalizer/StoredObjectNormalizer.php b/src/Bundle/ChillDocStoreBundle/Serializer/Normalizer/StoredObjectNormalizer.php index 4a0ba6dab..17597901d 100644 --- a/src/Bundle/ChillDocStoreBundle/Serializer/Normalizer/StoredObjectNormalizer.php +++ b/src/Bundle/ChillDocStoreBundle/Serializer/Normalizer/StoredObjectNormalizer.php @@ -57,13 +57,13 @@ final class StoredObjectNormalizer implements NormalizerInterface, NormalizerAwa // deprecated property $datas['creationDate'] = $datas['createdAt']; - $canDavSee = in_array(self::ADD_DAV_SEE_LINK_CONTEXT, $context['groups'] ?? [], true); - $canDavEdit = in_array(self::ADD_DAV_EDIT_LINK_CONTEXT, $context['groups'] ?? [], true); + $canSee = $this->security->isGranted(StoredObjectRoleEnum::SEE, $object); + $canEdit = $this->security->isGranted(StoredObjectRoleEnum::EDIT, $object); - if ($canDavSee || $canDavEdit) { + if ($canSee || $canEdit) { $accessToken = $this->JWTDavTokenProvider->createToken( $object, - $canDavEdit ? StoredObjectRoleEnum::EDIT : StoredObjectRoleEnum::SEE + $canEdit ? StoredObjectRoleEnum::EDIT : StoredObjectRoleEnum::SEE ); $datas['_links'] = [