Skip to content

Commit 6c34515

Browse files
committed
[Bug]: Fix GDPR search-data-objects permission (#525)
* Update GDPRDataController.php * fix typo * Apply php-cs-fixer changes --------- Co-authored-by: kingjia90 <[email protected]>
1 parent d1f3efb commit 6c34515

File tree

1 file changed

+8
-1
lines changed

1 file changed

+8
-1
lines changed

src/Controller/Admin/GDPRDataController.php

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,22 +16,29 @@
1616
namespace CustomerManagementFrameworkBundle\Controller\Admin;
1717

1818
use CustomerManagementFrameworkBundle\GDPR\DataProvider\Customers;
19+
use Pimcore\Controller\KernelControllerEventInterface;
1920
use Pimcore\Controller\Traits\JsonHelperTrait;
2021
use Pimcore\Controller\UserAwareController;
2122
use Pimcore\Model\DataObject\AbstractObject;
2223
use Symfony\Component\HttpFoundation\JsonResponse;
2324
use Symfony\Component\HttpFoundation\Request;
25+
use Symfony\Component\HttpKernel\Event\ControllerEvent;
2426
use Symfony\Component\Routing\Annotation\Route;
2527

2628
/**
2729
* Class DataObjectController
2830
*
2931
* @Route("/gdpr-data")
3032
*/
31-
class GDPRDataController extends UserAwareController
33+
class GDPRDataController extends UserAwareController implements KernelControllerEventInterface
3234
{
3335
use JsonHelperTrait;
3436

37+
public function onKernelControllerEvent(ControllerEvent $event): void
38+
{
39+
$this->checkPermission('gdpr_data_extractor');
40+
}
41+
3542
/**
3643
* @Route("/search-data-objects", name="_pimcore_customermanagementframework_gdprdata_searchdataobjects", methods={"GET"})
3744
*/

0 commit comments

Comments
 (0)