added domain logic for permission checks (#1803)

2020-07-04 13:29:03 +02:00
parent 091740f407
commit 682681afa5
16 changed files with 39 additions and 14 deletions
--- a/src/Repository/TeamRepository.php
+++ b/src/Repository/TeamRepository.php
@@ -174,7 +174,7 @@ class TeamRepository extends EntityRepository
        }

        // make sure that admins see all user
-        if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
+        if (null !== $user && $user->canSeeAllData()) {
            return;
        }