added domain logic for permission checks (#1803)

2020-07-04 13:29:03 +02:00
parent 091740f407
commit 682681afa5
16 changed files with 39 additions and 14 deletions
--- a/src/Form/Type/TeamMemberType.php
+++ b/src/Form/Type/TeamMemberType.php
@@ -45,7 +45,7 @@ class TeamMemberType extends AbstractType
                /** @var User $user */
                $user = $options['user'];

-                if (null !== $user && !$user->getTeams()->isEmpty() && !$user->isSuperAdmin() && !$user->isAdmin()) {
+                if (null !== $user && $user->hasTeamAssignment() && !$user->canSeeAllData()) {
                    $qb
                        ->leftJoin('u.teams', 'teams')
                        ->leftJoin('teams.users', 'users')