Chill-project/chill-bundles
6
0
Fork 0
mirror of https://gitlab.com/Chill-Projet/chill-bundles.git synced 2025-06-07 18:44:08 +00:00
Code Issues Actions Projects Releases Wiki Activity

AccompanyingPeriodResource: add ACL

Browse Source
This commit is contained in:
Julien Fastré 2022-01-10 23:12:52 +01:00
parent 2c4d06371c
commit 7564c2fde1
2 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/Bundle/ChillPersonBundle/DependencyInjection/ChillPersonExtension.php
View File

@ -14,6 +14,7 @@ namespace Chill\PersonBundle\DependencyInjection;
use Chill\MainBundle\DependencyInjection\MissingBundleException; use Chill\MainBundle\DependencyInjection\MissingBundleException;
use Chill\MainBundle\Security\Authorization\ChillExportVoter; use Chill\MainBundle\Security\Authorization\ChillExportVoter;
use Chill\PersonBundle\Doctrine\DQL\AddressPart; use Chill\PersonBundle\Doctrine\DQL\AddressPart;
use Chill\PersonBundle\Security\Authorization\AccompanyingPeriodResourceVoter;
use Chill\PersonBundle\Security\Authorization\AccompanyingPeriodVoter; use Chill\PersonBundle\Security\Authorization\AccompanyingPeriodVoter;
use Chill\PersonBundle\Security\Authorization\PersonVoter; use Chill\PersonBundle\Security\Authorization\PersonVoter;
use Exception; use Exception;
@ -425,11 +426,10 @@ class ChillPersonExtension extends Extension implements PrependExtensionInterfac
Request::METHOD_PATCH => true, Request::METHOD_PATCH => true,
Request::METHOD_HEAD => false, Request::METHOD_HEAD => false,
Request::METHOD_DELETE => false, Request::METHOD_DELETE => false,
], /*
'roles' => [
//Request::METHOD_PATCH => \Chill\PersonBundle\Security\Authorization\AccompanyingPeriodVoter::SEE
], ],
*/ 'roles' => [
Request::METHOD_PATCH => AccompanyingPeriodResourceVoter::EDIT,
],
], ],
], ],
], ],

7
src/Bundle/ChillPersonBundle/Security/Authorization/AccompanyingPeriodResourceVoter.php
View File

@ -23,6 +23,11 @@ class AccompanyingPeriodResourceVoter extends Voter
private AccessDecisionManagerInterface $accessDecisionManager; private AccessDecisionManagerInterface $accessDecisionManager;
public function __construct(AccessDecisionManagerInterface $accessDecisionManager)
{
$this->accessDecisionManager = $accessDecisionManager;
}
protected function supports($attribute, $subject) protected function supports($attribute, $subject)
{ {
return $subject instanceof Resource && self::EDIT === $attribute; return $subject instanceof Resource && self::EDIT === $attribute;
@ -35,7 +40,7 @@ class AccompanyingPeriodResourceVoter extends Voter
case self::EDIT: case self::EDIT:
return $this->accessDecisionManager->decide( return $this->accessDecisionManager->decide(
$token, $token,
AccompanyingPeriodVoter::EDIT, [AccompanyingPeriodVoter::EDIT],
$subject->getAccompanyingPeriod() $subject->getAccompanyingPeriod()
); );