09. ApiResource access_control

atournayre · Jul 14, 2021 · f8f5133 · f8f5133
1 parent d9bb324
commit f8f5133
Showing 1 changed file with 12 additions and 2 deletions.
diff --git a/src/Entity/CheeseListing.php b/src/Entity/CheeseListing.php
@@ -16,12 +16,22 @@
 
 /**
  * @ApiResource(
- *     collectionOperations={"get", "post"},
+ *     collectionOperations={
+ *         "get",
+ *         "post" = {
+ *              "access_control" = "is_granted('ROLE_USER')"
+ *          }
+ * },
  *     itemOperations={
  *          "get"={
  *              "normalization_context"={"groups"={"cheese_listing:read", "cheese_listing:item:get"}},
  *          },
- *          "put"
+ *          "put" = {
+ *              "access_control" = "is_granted('ROLE_USER')"
+ *          },
+ *          "delete" = {
+ *              "access_control" = "is_granted('ROLE_ADMIN')"
+ *          }
  *     },
  *     shortName="cheeses",
  *     normalizationContext={"groups"={"cheese_listing:read"}, "swagger_definition_name"="Read"},