added domain logic for permission checks (#1803)
This commit is contained in:
@@ -122,7 +122,7 @@ class ActivityRepository extends EntityRepository
|
||||
}
|
||||
|
||||
// make sure that admins see all activities
|
||||
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
|
||||
if (null !== $user && $user->canSeeAllData()) {
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
@@ -139,7 +139,7 @@ class CustomerRepository extends EntityRepository
|
||||
}
|
||||
|
||||
// make sure that admins see all customers
|
||||
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
|
||||
if (null !== $user && $user->canSeeAllData()) {
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
@@ -92,7 +92,7 @@ class InvoiceRepository extends EntityRepository
|
||||
}
|
||||
|
||||
// make sure that admins see all projects
|
||||
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
|
||||
if (null !== $user && $user->canSeeAllData()) {
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
@@ -131,7 +131,7 @@ class ProjectRepository extends EntityRepository
|
||||
}
|
||||
|
||||
// make sure that admins see all projects
|
||||
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
|
||||
if (null !== $user && $user->canSeeAllData()) {
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
@@ -174,7 +174,7 @@ class TeamRepository extends EntityRepository
|
||||
}
|
||||
|
||||
// make sure that admins see all user
|
||||
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
|
||||
if (null !== $user && $user->canSeeAllData()) {
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
@@ -549,7 +549,7 @@ class TimesheetRepository extends EntityRepository
|
||||
}
|
||||
|
||||
// make sure that admins see all timesheet records
|
||||
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
|
||||
if (null !== $user && $user->canSeeAllData()) {
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
@@ -159,7 +159,7 @@ class UserRepository extends EntityRepository implements UserLoaderInterface
|
||||
}
|
||||
|
||||
// make sure that admins see all user
|
||||
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
|
||||
if (null !== $user && $user->canSeeAllData()) {
|
||||
return;
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user