rgutierrez/resq
1
0
Fork 0
Code Issues 126 Pull requests 49 Projects Releases 4 Packages Wiki Activity Actions

Resolve "Fix access denied bug for customer add vehicle" #855

Merged
jankstudio merged 1 commit from 48-fix-access-denied-bug-for-customer-add-vehicle into master 2018-03-14 11:35:14 +00:00
Conversation 2 Commits 1 Files changed 1 +1 -4
1 changed files with 1 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
src/Controller/VehicleManufacturerController.php
View file

@ -263,10 +263,7 @@ class VehicleManufacturerController extends BaseController
public function getVehicles(Request $req) public function getVehicles(Request $req)
{ {
if (!$this->isGranted('battery.add') && !$this->isGranted('battery.update')) { // no access check, grant all for this ajax call
$exception = $this->createAccessDeniedException('No access.');
throw $exception;
}
// get row data // get row data
$em = $this->getDoctrine()->getManager(); $em = $this->getDoctrine()->getManager();