feat: improve security when delete

maelgangloff · Aug 16, 2024 · 1c18218 · 1c18218
1 parent 8b47d60
commit 1c18218
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/src/Entity/Connector.php b/src/Entity/Connector.php
@@ -32,7 +32,9 @@
             normalizationContext: ['groups' => ['connector:create', 'connector:list']], denormalizationContext: ['groups' => 'connector:create'],
             name: 'create'
         ),
-        new Delete(),
+        new Delete(
+            security: 'object.user == user'
+        ),
     ]
 )]
 #[ORM\Entity(repositoryClass: ConnectorRepository::class)]

diff --git a/src/Entity/WatchList.php b/src/Entity/WatchList.php
@@ -74,7 +74,9 @@
             security: 'object.user == user',
             name: 'update'
         ),
-        new Delete(),
+        new Delete(
+            security: 'object.user == user'
+        ),
     ],
 )]
 class WatchList