a3e440c254
Backend: - Add role hierarchy (ADMIN > GESTIONNAIRE > VIEWER > USER) in security.yaml - Add password authentication on profile activation (SessionProfileController) - Add SessionProfileAuthenticator with stateless API firewall - Add ProfilePasswordHasher state processor for API Platform - Add security annotations on all 18 API Platform entities - Add denyAccessUnlessGranted on all 13 custom controllers - Add AdminProfileController for profile/role management (/api/admin/profiles) - Add InitProfilePasswordsCommand for initial admin setup - Simplify SessionProfilesController to list-only (removed create/delete) Frontend (submodule update): - Add usePermissions composable (isAdmin, canEdit, canView, isGranted) - Add password login modal on profiles page - Add admin backoffice page for profile management - Disable all form fields for ROLE_VIEWER across all edit/create pages - Show navigation buttons for all roles, hide destructive actions for viewers - Add readonly mode to ModelTypeForm and site/constructeur modals - Guard /admin routes in middleware - Configure Vite proxy for API requests Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
38 lines
1.1 KiB
PHP
38 lines
1.1 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Controller;
|
|
|
|
use App\Repository\ProfileRepository;
|
|
use Symfony\Component\HttpFoundation\JsonResponse;
|
|
use Symfony\Component\Routing\Attribute\Route;
|
|
|
|
final class SessionProfilesController
|
|
{
|
|
public function __construct(
|
|
private readonly ProfileRepository $profiles,
|
|
) {}
|
|
|
|
#[Route('/api/session/profiles', name: 'api_session_profiles_list', methods: ['GET'])]
|
|
public function list(): JsonResponse
|
|
{
|
|
$items = $this->profiles->createQueryBuilder('p')
|
|
->andWhere('p.isActive = :active')
|
|
->setParameter('active', true)
|
|
->orderBy('p.firstName', 'ASC')
|
|
->getQuery()
|
|
->getResult()
|
|
;
|
|
|
|
return new JsonResponse(array_map(static function ($profile): array {
|
|
return [
|
|
'id' => $profile->getId(),
|
|
'firstName' => $profile->getFirstName(),
|
|
'lastName' => $profile->getLastName(),
|
|
'hasPassword' => null !== $profile->getPassword() && '' !== $profile->getPassword(),
|
|
];
|
|
}, $items));
|
|
}
|
|
}
|