Best practice to verify if a user is ADMIN

Hi there!

I’m creating a feature here that the user will be able to modify a custom value. I got this solution from Symfony code methods.. but I’m not sure if this is the best way to do this in OroCRM. What do you guys think? Can I use this or there is a better solution?

Thank you!

$user = $this->getUser(); if ($entity->getId() != $user->getId() ){ if (false === $this->get("security.context")->isGranted("ROLE_ADMINISTRATOR")) { throw new AccessDeniedException(); } }

1 2 3 4 5 6 7 8

$user = $this->getUser(); if ($entity->getId() != $user->getId() ){    if (false === $this->get("security.context")->isGranted("ROLE_ADMINISTRATOR")) {         throw new AccessDeniedException();     } }

Reference:
http://symfony.com/doc/current/book/security.html#securing-controllers-and-other-code

Topic

[Dima SorokaKeymaster]

Hi Rodolfo

I would recommend to introduce an ACL resource for this purpose and assign the permission to proper role.

What is your use case for admin role verification?

[RodolfoParticipant]

Hi @dima

I’m creating an extension to provide two-factor-authentication to OroCRM. Only the Admin user or the own user will be able to set up this feature.

I’ll read more about the ACL. Thanks!

[Author]

Replies