fix bug

zemit-cms · Jul 24, 2023 · d60cf3f · d60cf3f
1 parent 30b6b46
commit d60cf3f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/Mvc/Controller/Rest.php b/src/Mvc/Controller/Rest.php
@@ -772,6 +772,10 @@ public function beforeExecuteRoute(Dispatcher $dispatcher): void
         $roleList = $permissions['roles'] ?? [];
 
         foreach ($roleList as $role => $rolePermission) {
+            // do not attach other roles behaviors
+            if (!$this->identity->hasRole([$role])) {
+                continue;
+            }
 
             if (isset($rolePermission['features'])) {
                 foreach ($rolePermission['features'] as $feature) {