[Community] fixes users list access

claroline · Sep 5, 2023 · 58c2495 · 58c2495
1 parent c6b235d
commit 58c2495
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/src/main/core/Security/Voter/WorkspaceVoter.php b/src/main/core/Security/Voter/WorkspaceVoter.php
@@ -77,6 +77,11 @@ public function checkPermission(TokenInterface $token, $object, array $attribute
             if ($this->workspaceManager->hasAccess($object, $token, $toolPerm[0], $toolPerm[1])) {
                 return VoterInterface::ACCESS_GRANTED;
             }
+        } elseif (self::OPEN === $attributes[0]) {
+            // check if the user has access to at least one workspace tool to grant him access.
+            if ($this->workspaceManager->hasAccess($object, $token)) {
+                return VoterInterface::ACCESS_GRANTED;
+            }
         }
 
         return VoterInterface::ACCESS_DENIED;
@@ -125,7 +130,7 @@ private function checkView($token, Workspace $workspace): int
 
     private function checkPatch(TokenInterface $token, Workspace $workspace, ObjectCollection $collection = null): int
     {
-        //single property: no check now
+        // single property: no check now
         if (!$collection) {
             return VoterInterface::ACCESS_GRANTED;
         }
@@ -134,7 +139,7 @@ private function checkPatch(TokenInterface $token, Workspace $workspace, ObjectC
             return VoterInterface::ACCESS_GRANTED;
         }
 
-        //maybe do something more complicated later
+        // maybe do something more complicated later
         return $this->isGranted(self::EDIT, $collection) ?
             VoterInterface::ACCESS_GRANTED : VoterInterface::ACCESS_DENIED;
     }
@@ -151,7 +156,7 @@ private function isWorkspaceCreator(TokenInterface $token): bool
 
     public function getSupportedActions(): ?array
     {
-        //atm, null means "everything is supported... implement this later"
+        // atm, null means "everything is supported... implement this later"
         return null;
     }
 }