mirror/Part-DB.Part-DB-server
1
0
Fork 1
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2025-06-21 09:35:49 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Forbid building of a part, when the user is not allowed to withdraw parts stock

Browse source
This commit is contained in:
Jan Böhmer 2023-01-22 23:40:10 +01:00
parent 2f42eb7cff
commit 78eacd3ec1
2 changed files with 14 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/Controller/ProjectController.php
View file

@ -92,6 +92,9 @@ class ProjectController extends AbstractController
$form->handleRequest($request);
if ($form->isSubmitted()) {
if ($form->isValid()) {
//Ensure that the user can withdraw stock from all parts
$this->denyAccessUnlessGranted('@parts_stock.withdraw');
//We have to do a flush already here, so that the newly created partLot gets an ID and can be logged to DB later.
$entityManager->flush();
$buildHelper->doBuild($projectBuildRequest);

12
src/Form/ProjectSystem/ProjectBuildType.php
View file

@ -34,9 +34,17 @@ use Symfony\Component\Form\FormBuilderInterface;
use Symfony\Component\Form\FormEvents;
use Symfony\Component\Form\FormInterface;
use Symfony\Component\OptionsResolver\OptionsResolver;
use Symfony\Component\Security\Core\Security;
class ProjectBuildType extends AbstractType implements DataMapperInterface
{
private Security $security;
public function __construct(Security $security)
{
$this->security = $security;
}
public function configureOptions(OptionsResolver $resolver)
{
$resolver->setDefaults([
@ -50,7 +58,8 @@ class ProjectBuildType extends AbstractType implements DataMapperInterface
$builder->setDataMapper($this);
$builder->add('submit', SubmitType::class, [
'label' => 'project.build.btn_build'
'label' => 'project.build.btn_build',
'disabled' => !$this->security->isGranted('@parts_stock.withdraw'),
]);
$builder->add('comment', TextType::class, [
@ -89,6 +98,7 @@ class ProjectBuildType extends AbstractType implements DataMapperInterface
'label' => false,
'measurement_unit' => $bomEntry->getPart()->getPartUnit(),
'max' => min($build_request->getNeededAmountForBOMEntry($bomEntry), $lot->getAmount()),
'disabled' => !$this->security->isGranted('withdraw', $lot),
]);
}
}