MALIO-DEV/Lesstime
3
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases 32 Wiki Activity

fix(security) : exclude ROLE_USER for ROLE_CLIENT users

Browse Source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
THOLOT DECHENE Matthieu
2026-03-15 19:20:46 +01:00
parent f4eec2e6e9
commit edc441f363
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/Entity/User.php
View File

@@ -95,8 +95,11 @@ class User implements UserInterface, PasswordAuthenticatedUserInterface
/** @return list<string> */ /** @return list<string> */
public function getRoles(): array public function getRoles(): array
{ {
$roles = $this->roles; $roles = $this->roles;
$roles[] = 'ROLE_USER';
if (!in_array('ROLE_CLIENT', $roles, true)) {
$roles[] = 'ROLE_USER';
}
return array_values(array_unique($roles)); return array_values(array_unique($roles));
} }