fix ApiResources security

src/Entity/Access/Access.php

@@ -65,15 +65,6 @@ use Symfony\Component\Serializer\Annotation\Groups;
  */
 #[Auditable]
 #[ORM\Entity(repositoryClass: AccessRepository::class)]
-// TODO: revoir la sécurité
-#[ApiResource(
-    collectionOperations:[
-        "get"
-    ],
-    itemOperations: [
-        "get"
-    ]
-)]
 #[ApiFilter(BooleanFilter::class, properties: ['person.isPhysical'])]
 #[ApiFilter(FullNameFilter::class)]
 #[ApiFilter(InFilter::class, properties: ['id'])]

src/Entity/Billing/BillingIntangibleExcludeDate.php

@@ -13,13 +13,10 @@ use Doctrine\ORM\Mapping as ORM;
  */
 #[Auditable]
 #[ORM\Entity]
-// TODO: revoir la sécurité
 #[ApiResource(
-    collectionOperations:[
-        "get"
-    ],
+    collectionOperations:[],
     itemOperations: [
-        "get"
+        "get" => ["security" => "is_granted('ROLE_ADMIN')"]
     ]
 )]
 class BillingIntangibleExcludeDate

src/Entity/Booking/AttendanceBooking.php

@@ -13,13 +13,10 @@ use Doctrine\ORM\Mapping as ORM;
  */
 #[Auditable]
 #[ORM\Entity]
-// TODO: revoir la sécurité
 #[ApiResource(
-    collectionOperations:[
-        "get"
-    ],
+    collectionOperations:[],
     itemOperations: [
-        "get"
+        "get" => ["security" => "is_granted('ROLE_ADMIN')"]
     ]
 )]
 class AttendanceBooking

src/Entity/Person/CommissionMember.php

@@ -13,13 +13,10 @@ use Doctrine\ORM\Mapping as ORM;
  */
 #[Auditable]
 #[ORM\Entity]
-// TODO: revoir la sécurité
 #[ApiResource(
-    collectionOperations:[
-        "get"
-    ],
+    collectionOperations:[],
     itemOperations: [
-        "get"
+        "get" => ["security" => "is_granted('ROLE_ADMIN')"]
     ]
 )]
 class CommissionMember

src/Entity/Product/EquipmentLoan.php

@@ -18,13 +18,10 @@ use Doctrine\ORM\Mapping as ORM;
  */
 #[Auditable]
 #[ORM\Entity]
-// TODO: revoir la sécurité
 #[ApiResource(
-    collectionOperations:[
-        "get"
-    ],
+    collectionOperations:[],
     itemOperations: [
-        "get"
+        "get" => ["security" => "is_granted('ROLE_ADMIN')"]
     ]
 )]
 class EquipmentLoan