Session: Fix my sessions access.

crisgol · Oct 7, 2021 · 84bea41 · 84bea41
1 parent b5d40eb
commit 84bea41
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/src/CoreBundle/Entity/SessionRelCourse.php b/src/CoreBundle/Entity/SessionRelCourse.php
@@ -32,23 +32,20 @@
 #[ApiResource(
     collectionOperations: [
         'get' => [
-            'security' => "is_granted('ROLE_ADMIN')",
+            'security' => "is_granted('ROLE_USER')",
         ],
         'post' => [
             'security' => "is_granted('ROLE_ADMIN')",
         ],
     ],
     itemOperations: [
         'get' => [
-            'security' => "is_granted('ROLE_ADMIN')",
+            'security' => "is_granted('ROLE_ADMIN') or is_granted('VIEW', object)",
         ],
         'put' => [
             'security' => "is_granted('ROLE_ADMIN')",
         ],
     ],
-    attributes: [
-        'security' => "is_granted('ROLE_ADMIN')",
-    ],
     denormalizationContext: [
         'groups' => ['session_rel_course:write'],
     ],