feat : ajout de sécurité sur les endpoints

2026-03-17 13:52:00 +01:00
parent facded4c55
commit 6a64cb4c58
4 changed files with 7 additions and 7 deletions
--- a/src/Entity/MileageAllowance.php
+++ b/src/Entity/MileageAllowance.php
@@ -24,10 +24,10 @@ use Symfony\Component\Serializer\Attribute\Groups;
 #[ApiResource(
    operations: [
        new Get(
-            security: "is_granted('ROLE_USER')"
+            security: "is_granted('ROLE_ADMIN')"
        ),
        new GetCollection(
-            security: "is_granted('ROLE_USER')"
+            security: "is_granted('ROLE_ADMIN')"
        ),
        new Post(
            security: "is_granted('ROLE_ADMIN')"
@@ -47,7 +47,7 @@ use Symfony\Component\Serializer\Attribute\Groups;
        ),
        new Get(
            uriTemplate: '/mileage_allowances/{id}/receipt',
-            security: "is_granted('ROLE_USER')",
+            security: "is_granted('ROLE_ADMIN')",
            provider: MileageAllowanceReceiptDownloadProvider::class,
        ),
    ],