mirror of
https://github.com/alchemy-fr/Phraseanet.git
synced 2025-10-12 12:33:26 +00:00
Merge pull request #740 from romainneutron/fix-1558
[3.8] Fix #1558 : Do not restrict thesaurus browsing to thesaurus admins
This commit is contained in:
@@ -26,11 +26,16 @@ class Xmlhttp implements ControllerProviderInterface
|
||||
|
||||
$controllers->before(function () use ($app) {
|
||||
$app['firewall']->requireAuthentication();
|
||||
$app['firewall']->requireAccessToModule('thesaurus');
|
||||
});
|
||||
|
||||
$controllers->match('acceptcandidates.j.php', $this->call('AcceptCandidatesJson'));
|
||||
$controllers->match('checkcandidatetarget.j.php', $this->call('CheckCandidateTargetJson'));
|
||||
$controllers->match('acceptcandidates.j.php', $this->call('AcceptCandidatesJson'))
|
||||
->before(function () use ($app) {
|
||||
$app['firewall']->requireAccessToModule('thesaurus');
|
||||
});
|
||||
$controllers->match('checkcandidatetarget.j.php', $this->call('CheckCandidateTargetJson'))
|
||||
->before(function () use ($app) {
|
||||
$app['firewall']->requireAccessToModule('thesaurus');
|
||||
});
|
||||
$controllers->match('editing_presets.j.php', $this->call('EditingPresetsJson'));
|
||||
$controllers->match('getsy_prod.x.php', $this->call('GetSynonymsXml'));
|
||||
$controllers->match('getterm_prod.h.php', $this->call('GetTermHtml'));
|
||||
@@ -38,7 +43,10 @@ class Xmlhttp implements ControllerProviderInterface
|
||||
$controllers->match('openbranch_prod.j.php', $this->call('OpenBranchJson'));
|
||||
$controllers->match('openbranches_prod.h.php', $this->call('OpenBranchesHtml'));
|
||||
$controllers->match('openbranches_prod.x.php', $this->call('OpenBranchesXml'));
|
||||
$controllers->match('replacecandidate.j.php', $this->call('ReplaceCandidateJson'));
|
||||
$controllers->match('replacecandidate.j.php', $this->call('ReplaceCandidateJson'))
|
||||
->before(function () use ($app) {
|
||||
$app['firewall']->requireAccessToModule('thesaurus');
|
||||
});
|
||||
$controllers->match('search_th_term_prod.j.php', $this->call('SearchTermJson'));
|
||||
|
||||
return $controllers;
|
||||
|
Reference in New Issue
Block a user