PS-727 fix collection delete permission

alchemy-fr · Nov 15, 2024 · 05eb3ba · 05eb3ba
1 parent 3e024dd
commit 05eb3ba
Showing 1 changed file with 1 addition and 4 deletions.
diff --git a/databox/api/src/Security/Voter/AssetVoter.php b/databox/api/src/Security/Voter/AssetVoter.php
@@ -72,10 +72,7 @@ protected function voteOnAttribute(string $attribute, $subject, TokenInterface $
                 return $isOwner()
                     || $this->security->isGranted(self::SCOPE_PREFIX.'DELETE')
                     || $this->hasAcl(PermissionInterface::DELETE, $subject, $token)
-                    || (
-                        null !== $subject->getReferenceCollection()
-                        && $this->hasAcl(PermissionInterface::DELETE, $subject->getReferenceCollection(), $token)
-                    );
+                    || $this->voteOnContainer($subject, AbstractVoter::DELETE);
             case self::EDIT_PERMISSIONS:
                 return $isOwner()
                     || $this->security->isGranted(self::SCOPE_PREFIX.'OWNER')