mirror/Part-DB.Part-DB-server
1
0
Fork 1
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2025-08-19 00:58:34 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added permission checking for part price edit page.

Browse source
This commit is contained in:
Jan Böhmer 2019-09-13 17:46:26 +02:00
parent da14ee942d
commit 3374153b73
5 changed files with 101 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

8
src/Security/Voter/StructureVoter.php
View file

@ -56,9 +56,11 @@ class StructureVoter extends ExtendedVoter
*/
protected function supports($attribute, $subject)
{
$permission_name = $this->instanceToPermissionName($subject);
//If permission name is null, then the subject is not supported
return ($permission_name !== null) && $this->resolver->isValidOperation($permission_name, $attribute);
if(is_object($subject)) {
$permission_name = $this->instanceToPermissionName($subject);
//If permission name is null, then the subject is not supported
return ($permission_name !== null) && $this->resolver->isValidOperation($permission_name, $attribute);
}
}