* improved dev fixtures with more diversity, more data, better testcases, user avatars #42 * added customer stats to dashboard, fixed column length for 3 widgets #42 * fixed empty alias - display empty message for new user #42 * unified-ui for "new" toolbar icon #42 * use kimai2_ as database prefix #42 * added customer stats to dashboard, fixed column length for 3 widgets #42 * fix long project/customer names in "currently active" navbar flyout" #42 * added services config for dev environment #42 * added command to run unit tests #42 * added command to run integration tests #42 * added command to run code sniffer #42 * added phpcs and phpunit to composer #42 * created tests directory #42 * fixed code sniffer warnings #42 * added function to switch result type from Pagerfanta to QueryBuilder #42 * dramatically reduced database calls by using custom joined query #42 * added command to install kimai dependencies #42 * added dev:reset command #42
This commit is contained in:
@@ -36,7 +36,10 @@ class UserVoter extends AbstractVoter
|
||||
*/
|
||||
protected function supports($attribute, $subject)
|
||||
{
|
||||
if (!in_array($attribute, [self::VIEW, self::VIEW_ALL, self::EDIT, self::CREATE, self::ROLES, self::PASSWORD, self::DELETE])) {
|
||||
if (!in_array(
|
||||
$attribute,
|
||||
[self::VIEW, self::VIEW_ALL, self::EDIT, self::CREATE, self::ROLES, self::PASSWORD, self::DELETE]
|
||||
)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
@@ -71,7 +74,7 @@ class UserVoter extends AbstractVoter
|
||||
case self::CREATE:
|
||||
// create actually passes in the current user as $subject, not the new one
|
||||
case self::DELETE:
|
||||
// if we ever allow to delete user for ADMIN we have to check if the user to be deleted is not in a higher level
|
||||
// if we allow to delete user for ADMIN: make sure the user to be deleted is not in a higher level
|
||||
case self::ROLES:
|
||||
return $this->canAdminUsers($token);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user