Cadoles
/
ninegate
20
0
Fork 0
Code Issues 29 Pull Requests Projects 1 Releases Wiki Activity

fix role_admin route edispatcher/test

This commit is contained in:
Pierre Cadeot 2020-12-16 13:33:23 +04:00
parent f974047a61
commit 81520d0d7d
1 changed files with 22 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
src/ninegate-1.0/src/Cadoles/EdispatcherBundle/Controller/ApiController.php
View File

@ -69,7 +69,15 @@ class ApiController extends Controller
// Récupération UID // Récupération UID
$username = \phpCAS::getUser(); $username = \phpCAS::getUser();
$attributes = \phpCAS::getAttributes(); $attributes = \phpCAS::getAttributes();
if(isset($attributes[$this->getParameter('user_attr_cas_username')]))
$login = $attributes[$this->getParameter('user_attr_cas_username')];
$user=$em->getRepository('CadolesCoreBundle:User')->findOneBy(["username"=>$login]);
if(!$user) {
$output["error"]="user does not exist";
return new Response(json_encode($output), 400);
}
$roles=($user?$user->getRoles():["ROLE_ANONYME"]);
if (in_array("ROLE_ADMIN",$roles)) {
return $this->render('CadolesEdispatcherBundle:Test:test.html.twig',[ return $this->render('CadolesEdispatcherBundle:Test:test.html.twig',[
'useheader' => true, 'useheader' => true,
'usemenu' => false, 'usemenu' => false,
@ -79,6 +87,10 @@ class ApiController extends Controller
'username' => $username, 'username' => $username,
'datasource' => $datasource, 'datasource' => $datasource,
]); ]);
} else {
$output["error"]="access not granted";
return new Response(json_encode($output), 403);
}
} }