diff --git a/src/Controller/UserController.php b/src/Controller/UserController.php index 8d1b52d..31a8488 100644 --- a/src/Controller/UserController.php +++ b/src/Controller/UserController.php @@ -170,8 +170,9 @@ class UserController extends AbstractController #[Route('/edit/{id}', name: 'edit', methods: ['GET', 'POST'])] public function edit(int $id, Request $request): Response { + $this->denyAccessUnlessGranted('ROLE_USER'); try{ - $this->denyAccessUnlessGranted('ROLE_USER'); + $actingUser = $this->userService->getUserByIdentifier($this->getUser()->getUserIdentifier()); if ($this->userService->hasAccessTo($actingUser)) { $user = $this->userRepository->find($id);