[Bug]: Fix GDPR search-data-objects permission (#525)

* Update GDPRDataController.php * fix typo * Apply php-cs-fixer changes --------- Co-authored-by: kingjia90 <[email protected]>
pimcore · Jan 9, 2024 · 635826d · 635826d
1 parent e2ab34a
commit 635826d
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/src/Controller/Admin/GDPRDataController.php b/src/Controller/Admin/GDPRDataController.php
@@ -16,17 +16,24 @@
 namespace CustomerManagementFrameworkBundle\Controller\Admin;
 
 use CustomerManagementFrameworkBundle\GDPR\DataProvider\Customers;
+use Pimcore\Controller\KernelControllerEventInterface;
 use Pimcore\Model\DataObject\AbstractObject;
 use Symfony\Component\HttpFoundation\Request;
+use Symfony\Component\HttpKernel\Event\ControllerEvent;
 use Symfony\Component\Routing\Annotation\Route;
 
 /**
  * Class DataObjectController
  *
  * @Route("/gdpr-data")
  */
-class GDPRDataController extends \Pimcore\Bundle\AdminBundle\Controller\AdminController
+class GDPRDataController extends \Pimcore\Bundle\AdminBundle\Controller\AdminController implements KernelControllerEventInterface
 {
+    public function onKernelControllerEvent(ControllerEvent $event): void
+    {
+        $this->checkPermission('gdpr_data_extractor');
+    }
+
     /**
      * @param Request $request
      * @param Customers $service