Chill-project/chill-bundles
6
0
Fork 0
mirror of https://gitlab.com/Chill-Projet/chill-bundles.git synced 2025-06-07 18:44:08 +00:00
Code Issues Actions Projects Releases Wiki Activity

fix access denied when updating a work

Browse Source
This commit is contained in:
Julien Fastré 2022-02-11 17:20:26 +01:00
parent e7d0c1cac6
commit 62c78e650f
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/Bundle/ChillPersonBundle/Security/Authorization/AccompanyingPeriodWorkVoter.php
View File

@ -58,6 +58,11 @@ class AccompanyingPeriodWorkVoter extends Voter
case self::SEE: case self::SEE:
return $this->security->isGranted(AccompanyingPeriodVoter::SEE_DETAILS, $subject->getAccompanyingPeriod()); return $this->security->isGranted(AccompanyingPeriodVoter::SEE_DETAILS, $subject->getAccompanyingPeriod());
case self::CREATE:
case self::UPDATE:
return $this->security->isGranted(AccompanyingPeriodVoter::EDIT, $subject->getAccompanyingPeriod());
default: default:
throw new UnexpectedValueException("attribute {$attribute} is not supported"); throw new UnexpectedValueException("attribute {$attribute} is not supported");
} }
@ -79,6 +84,6 @@ class AccompanyingPeriodWorkVoter extends Voter
private function getRoles(): array private function getRoles(): array
{ {
return [self::SEE]; return [self::SEE, self::CREATE, self::UPDATE];
} }
} }