added domain logic for permission checks (#1803)

2020-07-04 13:29:03 +02:00
parent 091740f407
commit 682681afa5
16 changed files with 39 additions and 14 deletions
--- a/src/Repository/InvoiceRepository.php
+++ b/src/Repository/InvoiceRepository.php
@@ -92,7 +92,7 @@ class InvoiceRepository extends EntityRepository
        }

        // make sure that admins see all projects
-        if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
+        if (null !== $user && $user->canSeeAllData()) {
            return;
        }