added domain logic for permission checks (#1803)

This commit is contained in:
Kevin Papst
2020-07-04 13:29:03 +02:00
committed by GitHub
parent 091740f407
commit 682681afa5
16 changed files with 39 additions and 14 deletions

View File

@@ -122,7 +122,7 @@ class ActivityRepository extends EntityRepository
}
// make sure that admins see all activities
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
if (null !== $user && $user->canSeeAllData()) {
return;
}

View File

@@ -139,7 +139,7 @@ class CustomerRepository extends EntityRepository
}
// make sure that admins see all customers
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
if (null !== $user && $user->canSeeAllData()) {
return;
}

View File

@@ -92,7 +92,7 @@ class InvoiceRepository extends EntityRepository
}
// make sure that admins see all projects
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
if (null !== $user && $user->canSeeAllData()) {
return;
}

View File

@@ -131,7 +131,7 @@ class ProjectRepository extends EntityRepository
}
// make sure that admins see all projects
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
if (null !== $user && $user->canSeeAllData()) {
return;
}

View File

@@ -174,7 +174,7 @@ class TeamRepository extends EntityRepository
}
// make sure that admins see all user
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
if (null !== $user && $user->canSeeAllData()) {
return;
}

View File

@@ -549,7 +549,7 @@ class TimesheetRepository extends EntityRepository
}
// make sure that admins see all timesheet records
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
if (null !== $user && $user->canSeeAllData()) {
return;
}

View File

@@ -159,7 +159,7 @@ class UserRepository extends EntityRepository implements UserLoaderInterface
}
// make sure that admins see all user
if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
if (null !== $user && $user->canSeeAllData()) {
return;
}