added domain logic for permission checks (#1803)

2020-07-04 13:29:03 +02:00
parent 091740f407
commit 682681afa5
16 changed files with 39 additions and 14 deletions
--- a/src/Repository/TimesheetRepository.php
+++ b/src/Repository/TimesheetRepository.php
@@ -549,7 +549,7 @@ class TimesheetRepository extends EntityRepository
        }

        // make sure that admins see all timesheet records
-        if (null !== $user && ($user->isSuperAdmin() || $user->isAdmin())) {
+        if (null !== $user && $user->canSeeAllData()) {
            return;
        }