new permission to hide user choice in report (#2572)

2021-05-16 00:52:42 +02:00
parent f7aa3c1e13
commit dd83872339
2 changed files with 3 additions and 2 deletions
--- a/src/Controller/Reporting/ReportByUserController.php
+++ b/src/Controller/Reporting/ReportByUserController.php
@@ -42,7 +42,7 @@ final class ReportByUserController extends AbstractController
    private function canSelectUser(): bool
    {
        // also found in App\EventSubscriber\Actions\UserSubscriber
-        if (!$this->isGranted('view_other_timesheet')) {
+        if (!$this->isGranted('view_other_timesheet') || !$this->isGranted('view_other_reporting')) {
            return false;
        }