Merge branch 'master' of github.com:chamilo/chamilo-lms

Author: ywarnier

public/main/admin/user_edit.php

@@ -112,6 +112,7 @@ function confirmation(name) {
     api_get_self().'?user_id='.$user_id,
     ''
 );
+$form->protect();
 $form->addElement('header', $tool_name);
 $form->addElement('hidden', 'user_id', $user_id);
 

src/CoreBundle/Entity/Course.php

@@ -71,8 +71,8 @@
             read: false,
             deserialize: false,
         ),
-        new Post(security: "is_granted('ROLE_USER')"),
-        new GetCollection(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_TEACHER') or is_granted('ROLE_ADMIN')"),
+        new GetCollection(security: "is_granted('ROLE_TEACHER') or is_granted('ROLE_ADMIN')"),
         new GetCollection(
             uriTemplate: '/public_courses',
             normalizationContext: ['groups' => ['course:read']],

src/CoreBundle/Entity/User.php

@@ -104,7 +104,7 @@
         ),
         new Put(security: "is_granted('EDIT', object)"),
         new Delete(security: "is_granted('DELETE', object)"),
-        new GetCollection(security: "is_granted('ROLE_USER')"),
+        new GetCollection(security: "is_granted('ROLE_ADMIN')"),
         new Post(security: "is_granted('ROLE_ADMIN')"),
         new GetCollection(
             uriTemplate: '/users/{id}/skills',