jjsm01/kimai2
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

API methods to handle teams and users (#1384)

Browse Source
This commit is contained in:
Kevin Papst
2020-01-28 22:28:31 +01:00
committed by GitHub
parent a31e027c54
commit 836a530b86
24 changed files with 1525 additions and 107 deletions
Download Patch File Download Diff File Expand all files Collapse all files

64
src/Voter/UserVoter.php
View File

@@ -17,26 +17,16 @@ use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
*/
class UserVoter extends AbstractVoter
{
public const VIEW = 'view';
public const EDIT = 'edit';
public const DELETE = 'delete';
public const PASSWORD = 'password';
public const ROLES = 'roles';
public const TEAMS = 'teams';
public const PREFERENCES = 'preferences';
public const API_TOKEN = 'api-token';
public const HOURLY_RATE = 'hourly-rate';
public const ALLOWED_ATTRIBUTES = [
self::VIEW,
self::EDIT,
self::ROLES,
self::TEAMS,
self::PASSWORD,
self::DELETE,
self::PREFERENCES,
self::API_TOKEN,
self::HOURLY_RATE,
'view',
'edit',
'roles',
'teams',
'password',
'delete',
'preferences',
'api-token',
'hourly-rate',
];
/**
@@ -71,39 +61,21 @@ class UserVoter extends AbstractVoter
return false;
}
$permission = '';
switch ($attribute) {
// special case for the UserController
case self::DELETE:
if ($subject->getId() === $user->getId()) {
return false;
}
return $this->hasRolePermission($user, 'delete_user');
case self::VIEW:
case self::EDIT:
case self::PREFERENCES:
case self::PASSWORD:
case self::API_TOKEN:
case self::ROLES:
case self::TEAMS:
case self::HOURLY_RATE:
$permission .= $attribute;
break;
default:
if ($attribute === 'delete') {
if ($subject->getId() === $user->getId()) {
return false;
}
return $this->hasRolePermission($user, 'delete_user');
}
$permission .= '_';
$permission = $attribute;
// extend me for "team" support later on
if ($subject->getId() == $user->getId()) {
$permission .= 'own';
if ($subject->getId() === $user->getId()) {
$permission .= '_own';
} else {
$permission .= 'other';
$permission .= '_other';
}
$permission .= '_profile';