Very crude permissions

TODO: Use Symfony Voters
2024-10-30 13:03:29 +01:00
parent c20ec66f22
commit b41e394e9c
3 changed files with 64 additions and 3 deletions
--- a/src/Controller/VocabFuncContextController.php
+++ b/src/Controller/VocabFuncContextController.php
@@ -15,6 +15,15 @@ class VocabFuncContextController extends AbstractController
    #[Route('/vocabs/functional_context', name: 'app_vocab_func_context')]
    public function index(EntityManagerInterface $em): Response
    {
+        $roles = $this->getUser()->getRoles();
+
+        if (! in_array('ROLE_REVISOR', $roles)
+            && ! in_array('ROLE_ADMIN', $roles)
+        ) {
+            $this->addFlash('warning', 'Only revisors and administrators can edit vocabularies');
+            return $this->redirectToRoute('app_home');
+        }
+
        $terms = $em->getRepository(VocabFuncContext::class)->findBy([], ['term' => 'ASC']);

        return $this->render('vocab_func_context/index.html.twig', [