diff --git a/src/Controller/UserController.php b/src/Controller/UserController.php index 5655ac4..6315bcb 100644 --- a/src/Controller/UserController.php +++ b/src/Controller/UserController.php @@ -38,9 +38,16 @@ class UserController extends AbstractController if ($this->isGranted('ROLE_SUPER_ADMIN')) { $usersByOrganization = $entityManager->getRepository(UsersOrganizations::class)->getActiveUsersGroupedByOrganization(); - } else { + } else{ $userIdentifier = $this->getUser()->getUserIdentifier(); + if (!$userIdentifier) { + return $this->redirectToRoute('app_login'); + } $organizations = $this->entityManager->getRepository(UsersOrganizations::class)->findOrganizationsByUserEmailAndRoleName($userIdentifier, 'ADMIN'); + if(!$organizations) { +// if user is not admin in any organization, throw access denied + throw $this->createNotFoundException(self::ACCESS_DENIED); + } $usersByOrganization = $this->entityManager->getRepository(UsersOrganizations::class) ->findActiveUsersByOrganizations($organizations); }