Chill-project/chill-bundles
6
0
Fork 0
mirror of https://gitlab.com/Chill-Projet/chill-bundles.git synced 2025-06-12 21:34:25 +00:00
Code Issues Actions Projects Releases Wiki Activity

allow a user/referrer to see his own courses, even if the scope is not his own

Browse Source
This commit is contained in:
Julien Fastré 2022-03-24 10:58:43 +01:00
parent 949bdfd993
commit 7df70cab98
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/Bundle/ChillPersonBundle/Security/Authorization/AccompanyingPeriodVoter.php
View File

@ -130,6 +130,14 @@ class AccompanyingPeriodVoter extends AbstractChillVoter implements ProvideRoleH
return false; return false;
} }
if (in_array($attribute, [
self::SEE, self::SEE_DETAILS, self::EDIT
])) {
if ($subject->getUser() === $token->getUser()) {
return true;
}
}
if (self::TOGGLE_CONFIDENTIAL === $attribute) { if (self::TOGGLE_CONFIDENTIAL === $attribute) {
if (null !== $subject->getUser() && ($subject->getUser() === $token->getUser())) { if (null !== $subject->getUser() && ($subject->getUser() === $token->getUser())) {
return true; return true;