Commit 5c018f27 authored by Stephane Bouvry's avatar Stephane Bouvry
Browse files

- Fix : Accès à la recherche des organisations pour les responsables de... 

- Fix : Accès à la recherche des organisations pour les responsables de structure dans la recherche avancées
parent 400c6c05

module/Oscar/src/Oscar/Controller/OrganizationController.php

+5 −2
Changes for module/Oscar/src/Oscar/Controller/OrganizationController.php: 5 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -122,7 +122,9 @@ class OrganizationController extends AbstractOscarController implements UseOrgan 
        } else {

            $allow = $this->getOscarUserContextService()->hasOneOfPrivilegesInAnyRoles([

                Privileges::ACTIVITY_ORGANIZATION_MANAGE,

                Privileges::PROJECT_ORGANIZATION_MANAGE]);

                Privileges::PROJECT_ORGANIZATION_MANAGE,

                Privileges::ACTIVITY_INDEX,

            ]);

        }



        if( !$allow ){
@@ -259,7 +261,8 @@ class OrganizationController extends AbstractOscarController implements UseOrgan 


        if(

            !$this->getOscarUserContextService()->hasPrivilegeDeep(Privileges::PROJECT_ORGANIZATION_MANAGE) &&

            !$this->getOscarUserContextService()->hasPrivilegeDeep(Privileges::ACTIVITY_ORGANIZATION_MANAGE)

            !$this->getOscarUserContextService()->hasPrivilegeDeep(Privileges::ACTIVITY_ORGANIZATION_MANAGE) &&

            ! $this->getOscarUserContextService()->hasPrivilegeDeep(Privileges::ACTIVITY_INDEX)

        ){

            return $this->getResponseUnauthorized("Vous n'avez pas l'authorisation d'accéder à la  liste des organisations");

        }

module/Oscar/src/Oscar/Controller/PersonController.php

+2 −1
Changes for module/Oscar/src/Oscar/Controller/PersonController.php: 2 added lines, 1 removed line.
Original line number Diff line number Diff line
@@ -452,7 +452,8 @@ class PersonController extends AbstractOscarController implements UsePersonServi 
        if (

            !$this->getOscarUserContextService()->hasPrivilegeDeep(Privileges::ACTIVITY_PERSON_MANAGE) &&

            !$this->getOscarUserContextService()->hasPrivilegeDeep(Privileges::PROJECT_PERSON_MANAGE) &&

            !$this->getOscarUserContextService()->hasPrivilegeDeep(Privileges::ORGANIZATION_EDIT)

            !$this->getOscarUserContextService()->hasPrivilegeDeep(Privileges::ORGANIZATION_EDIT) &&

            !$this->getOscarUserContextService()->hasPrivilegeDeep(Privileges::ACTIVITY_INDEX)

        )

            return $this->getResponseUnauthorized("Vous n'avez pas accès à la liste des personnes");