Browse Source

correctif API recherche des slots dispo accès ROLE_MANAGER

garthh 3 weeks ago
parent
commit
0e13576db2

+ 1 - 1
assets/controllers/request_process_controller.js

@@ -21,7 +21,7 @@ export default class extends Controller {
         // 3. forcer un scroll jusqu'à #lastStep
 
         // Etape 1
-        fetch(`/admin/api/slot/${slotId}/nexts`, {
+        fetch(`/api/slot/${slotId}/nexts`, {
           method: 'POST',
           headers: {
             'Accept': 'application/json'

+ 3 - 2
src/Controller/Admin/EventConfig/SlotController.php

@@ -18,8 +18,9 @@ use App\Service\DateTimeHelper;
 
 final class SlotController extends AbstractController
 {
-    #[Route('/admin/api/slot/{id}/nexts', name: 'app_admin_api_slot_next', requirements: ['id' => '\d+'], methods: ['POST'])]
-    public function adminApiNexts(?Slot $slot, SlotRepository $repository): JsonResponse
+    #[IsGranted(new Expression('is_granted("ROLE_ADMIN") or is_granted("ROLE_MANAGER")'))]
+    #[Route('/api/slot/{id}/nexts', name: 'api_slot_nexts', requirements: ['id' => '\d+'], methods: ['POST'])]
+    public function apiSlotNexts(?Slot $slot, SlotRepository $repository): JsonResponse
     {
         if (!$slot) {
             return $this->json(['error' => 'Slot not found'], 404);