From 63306b4e54415f4e2f8694fe9c8a2137d3175129 Mon Sep 17 00:00:00 2001
From: Daniel Subiabre <daniel.subiabre@platoniq.net>
Date: Mon, 20 Jul 2026 14:36:44 +0200
Subject: [PATCH] fix: show user roles when appropriate

---
 src/ApiResource/User/UserApiResource.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/ApiResource/User/UserApiResource.php b/src/ApiResource/User/UserApiResource.php
index 73fbc2e..31852a6 100644
--- a/src/ApiResource/User/UserApiResource.php
+++ b/src/ApiResource/User/UserApiResource.php
@@ -95,7 +95,7 @@ class UserApiResource
      * @var array<int, string>
      */
     #[API\ApiProperty(
-        security: 'is_granted("ROLE_ADMIN")',
+        security: 'is_granted("USER_EDIT", object)',
         securityPostDenormalize: 'is_granted("ROLE_ADMIN")'
     )]
     public array $roles;