I have searched for FOSUserBundle private profile, to no avail - php

Question

So I have tried to make a symfony project that contains private profiles, and I use FriendsOfSymfony, but if I create a two users, each one can see the others uploaded file. I tried to search on multiple websites and failed to find something that worked for me.
example:
Adding extended profile entity to FOS UserBundle
I want to create private profiles for each user to upload files, no one except them should be able to see them(only the admin and the specific user).

Answer 1

Provided you have extended
Symfony\Bundle\FrameworkBundle\Controller\Controller
or FOSUserBundle Controller you could try doing something like this:
public function publicProfileAction($handleOrHash = '')
{
if ($handleOrHash == '') {
throw new NotFoundHttpException("Unable to find this user");
}
$user = $this->getUserService()->getUserByHandleOrHash($handleOrHash);
if (!$user) {
throw new NotFoundHttpException("Unable to find this user");
}
if ($user != $this->getUser()) {
throw new AccessDeniedException("You cannot see this user profile");
}
return $this->render('MyUserBundle:Default:public-profile.html.twig',
array('user' => $user)
);
}
Where getUserService() will return an object which has access to the userRepository with a method called getUserByHandleOrHash() which uses the repository to make the doctrine query.

Answer 2

Question is very broad.
You need to introduce authentication to your application.
And add user id or user relation to your uploaded files. Then in controller where you list/show that files (/profile/my-uploads) - load only files which belongs to this specific (logged in) user.
For admin access - best will be creating special back-office or implement User Impersonation.
Read more about it in Symfony documentation: http://symfony.com/doc/current/components/security/authentication.html