bug fix access control

hesabixCore/src/Controller/BankController.php

@@ -59,8 +59,8 @@ class BankController extends AbstractController
                 ->getQuery()
                 ->getResult();
             foreach ($items as $item) {
-                $bs += $item->getBs();
+                $bs += (float) $item->getBs();
-                $bd += $item->getBd();
+                $bd += (float) $item->getBd();
             }
             $data->setBalance($bd - $bs);
         }

hesabixCore/src/Controller/CashdeskController.php

@@ -61,8 +61,8 @@ class CashdeskController extends AbstractController
                 ->getQuery()
                 ->getResult();
             foreach ($items as $item) {
-                $bs += $item->getBs();
+                $bs += (float) $item->getBs();
-                $bd += $item->getBd();
+                $bd += (float) $item->getBd();
             }
             $data->setBalance($bd - $bs);
             $resp[] = Explore::ExploreCashdesk($data);
@@ -206,8 +206,8 @@ class CashdeskController extends AbstractController
                 ->getQuery()
                 ->getResult();
             foreach ($items as $item) {
-                $bs += $item->getBs();
+                $bs += (float) $item->getBs();
-                $bd += $item->getBd();
+                $bd += (float) $item->getBd();
             }
             $data->setBalance($bd - $bs);
         }
@@ -255,8 +255,8 @@ class CashdeskController extends AbstractController
             ->getResult();
 
         foreach ($items as $item) {
-            $bs += $item->getBs();
+            $bs += (float) $item->getBs();
-            $bd += $item->getBd();
+            $bd += (float) $item->getBd();
         }
 
         return $this->json([

hesabixCore/src/Service/Access.php

@@ -144,13 +144,26 @@ class Access
             }
         }
         
+        // normalize incoming role names to match Permission getters
+        $normalizeMap = [
+            'bank' => 'banks',
+            'transfer' => 'bankTransfer',
+            'person_receive' => 'person',
+            'person_send' => 'person',
+            'sell_receive' => 'sell',
+            'buy_send' => 'buy',
+            'all' => 'accounting',
+        ];
+        if (isset($normalizeMap[$roll])) {
+            $roll = $normalizeMap[$roll];
+        }
         $methodName = 'is' . ucfirst($roll);
         $permission = $this->em->getRepository(Permission::class)->findOneBy([
            'bid'=>$bid,
            'user'=>$this->user
         ]);
         if($permission){
-            if($permission->{$methodName}())
+            if(method_exists($permission, $methodName) && $permission->{$methodName}())
                 return $accessArray;
         }
         return false;