From dafe7e6b1c8a8621e1a4dbde9a7f9630ef025354 Mon Sep 17 00:00:00 2001
From: Korina Cordero <cordero.korina@gmail.com>
Date: Thu, 5 Mar 2020 06:53:26 +0000
Subject: [PATCH] Modify access to getCustomerVehicles. #366

---
 src/Controller/CustomerController.php | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/Controller/CustomerController.php b/src/Controller/CustomerController.php
index 7421fec0..dcbecc28 100644
--- a/src/Controller/CustomerController.php
+++ b/src/Controller/CustomerController.php
@@ -181,7 +181,10 @@ class CustomerController extends Controller
 
     public function getCustomerVehicles(Request $req, CustomerHandlerInterface $cust_handler)
     {
-        if (!$this->isGranted('jo_in.list')) {
+        if ((!$this->isGranted('jo_onestep.form')) ||
+            (!$this->isGranted('jo_walkin.form')) ||
+            (!$this->isGranted('jo_onestep.edit')) ||
+            (!$this->isGranted('jo_walkin.edit'))) {
             $exception = $this->createAccessDeniedException('No access.');
             throw $exception;
         }