added domain logic for permission checks (#1803)

2020-07-04 13:29:03 +02:00
parent 091740f407
commit 682681afa5
16 changed files with 39 additions and 14 deletions
--- a/src/Repository/CustomerRepository.php
+++ b/src/Repository/CustomerRepository.php
@@ -139,7 +139,7 @@ class CustomerRepository extends EntityRepository
        }

        // make sure that admins see all customers
-        if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
+        if (null !== $user && $user->canSeeAllData()) {
            return;
        }