From 9f88eef2493c0cac48ffe29524c14db36aae83ff Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Julien=20Fastr=C3=A9?= Date: Mon, 15 Jul 2024 21:25:22 +0200 Subject: [PATCH] Fix permission logic in StoredObjectNormalizer The logic for checking 'see' and 'edit' permissions within the StoredObjectNormalizer has been updated. It now correctly refers to the value of the StoredObjectRoleEnum to check access rights. --- .../Serializer/Normalizer/StoredObjectNormalizer.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/Bundle/ChillDocStoreBundle/Serializer/Normalizer/StoredObjectNormalizer.php b/src/Bundle/ChillDocStoreBundle/Serializer/Normalizer/StoredObjectNormalizer.php index 17597901d..ebd7d3564 100644 --- a/src/Bundle/ChillDocStoreBundle/Serializer/Normalizer/StoredObjectNormalizer.php +++ b/src/Bundle/ChillDocStoreBundle/Serializer/Normalizer/StoredObjectNormalizer.php @@ -57,8 +57,8 @@ final class StoredObjectNormalizer implements NormalizerInterface, NormalizerAwa // deprecated property $datas['creationDate'] = $datas['createdAt']; - $canSee = $this->security->isGranted(StoredObjectRoleEnum::SEE, $object); - $canEdit = $this->security->isGranted(StoredObjectRoleEnum::EDIT, $object); + $canSee = $this->security->isGranted(StoredObjectRoleEnum::SEE->value, $object); + $canEdit = $this->security->isGranted(StoredObjectRoleEnum::EDIT->value, $object); if ($canSee || $canEdit) { $accessToken = $this->JWTDavTokenProvider->createToken(