feat(sidebar) : add role gate to sidebar provider and global nav config

src/Shared/Infrastructure/ApiPlatform/State/SidebarProvider.php

@@ -9,6 +9,7 @@ use ApiPlatform\State\ProviderInterface;
 use App\Shared\Domain\Module\ModuleRegistry;
 use App\Shared\Domain\Sidebar\SidebarFilter;
 use App\Shared\Infrastructure\ApiPlatform\Resource\SidebarResource;
+use Symfony\Bundle\SecurityBundle\Security;
 use Symfony\Component\DependencyInjection\Attribute\Autowire;
 
 final readonly class SidebarProvider implements ProviderInterface
@@ -16,6 +17,7 @@ final readonly class SidebarProvider implements ProviderInterface
     public function __construct(
         #[Autowire('%kernel.project_dir%')]
         private string $projectDir,
+        private Security $security,
     ) {}
 
     public function provide(Operation $operation, array $uriVariables = [], array $context = []): SidebarResource
@@ -23,10 +25,13 @@ final readonly class SidebarProvider implements ProviderInterface
         /** @var list<class-string> $moduleClasses */
         $moduleClasses = require $this->projectDir.'/config/modules.php';
 
-        /** @var list<array{label:string, icon:string, items: list<array{label:string, to:string, icon:string, module?:string}>}> $sidebar */
+        /** @var list<array{label:string, icon:string, roles?:list<string>, items: list<array{label:string, to:string, icon:string, module?:string, roles?:list<string>}>}> $sidebar */
         $sidebar = require $this->projectDir.'/config/sidebar.php';
 
-        $filtered = SidebarFilter::filter($sidebar, ModuleRegistry::ids($moduleClasses));
+        $user  = $this->security->getUser();
+        $roles = null !== $user ? $user->getRoles() : [];
+
+        $filtered = SidebarFilter::filter($sidebar, ModuleRegistry::ids($moduleClasses), array_values($roles));
 
         $dto                 = new SidebarResource();
         $dto->sections       = $filtered['sections'];