Quellcode durchsuchen

Fixed sonata_top_nav_menu visibility (#4046)

Added security checks in order to show contents of block sonata_top_nav_menu only to logged in users
Daniel Londero vor 8 Jahren
Ursprung
Commit
1065722ce4
1 geänderte Dateien mit 24 neuen und 22 gelöschten Zeilen
  1. 24 22
      Resources/views/standard_layout.html.twig

+ 24 - 22
Resources/views/standard_layout.html.twig

@@ -162,28 +162,30 @@ file that was distributed with this source code.
                         </div>
 
                         {% block sonata_top_nav_menu %}
-                            <div class="navbar-custom-menu">
-                                <ul class="nav navbar-nav">
-                                    {% block sonata_top_nav_menu_add_block %}
-                                        <li class="dropdown">
-                                            <a class="dropdown-toggle" data-toggle="dropdown" href="#">
-                                                <i class="fa fa-plus-square fa-fw"></i> <i class="fa fa-caret-down"></i>
-                                            </a>
-                                            {% include sonata_admin.adminPool.getTemplate('add_block') %}
-                                        </li>
-                                    {% endblock %}
-                                    {% block sonata_top_nav_menu_user_block %}
-                                        <li class="dropdown user-menu">
-                                            <a class="dropdown-toggle" data-toggle="dropdown" href="#">
-                                                <i class="fa fa-user fa-fw"></i> <i class="fa fa-caret-down"></i>
-                                            </a>
-                                            <ul class="dropdown-menu dropdown-user">
-                                                {% include sonata_admin.adminPool.getTemplate('user_block') %}
-                                            </ul>
-                                        </li>
-                                    {% endblock %}
-                                </ul>
-                            </div>
+                            {% if app.user and is_granted('ROLE_SONATA_ADMIN') %}
+                                <div class="navbar-custom-menu">
+                                    <ul class="nav navbar-nav">
+                                        {% block sonata_top_nav_menu_add_block %}
+                                            <li class="dropdown">
+                                                <a class="dropdown-toggle" data-toggle="dropdown" href="#">
+                                                    <i class="fa fa-plus-square fa-fw"></i> <i class="fa fa-caret-down"></i>
+                                                </a>
+                                                {% include sonata_admin.adminPool.getTemplate('add_block') %}
+                                            </li>
+                                        {% endblock %}
+                                        {% block sonata_top_nav_menu_user_block %}
+                                            <li class="dropdown user-menu">
+                                                <a class="dropdown-toggle" data-toggle="dropdown" href="#">
+                                                    <i class="fa fa-user fa-fw"></i> <i class="fa fa-caret-down"></i>
+                                                </a>
+                                                <ul class="dropdown-menu dropdown-user">
+                                                    {% include sonata_admin.adminPool.getTemplate('user_block') %}
+                                                </ul>
+                                            </li>
+                                        {% endblock %}
+                                    </ul>
+                                </div>
+                            {% endif %}
                         {% endblock %}
                     </nav>
                 {% endblock sonata_nav %}