tim/invoiceninja
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Permissions fixes (#2428)

Browse source
This commit is contained in:
David Bomba 2018-10-06 08:35:48 +10:00 • committed by GitHub
parent e254cf3833
commit 024c853b9f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
app/Http/Requests/InvoiceRequest.php
View file

@ -31,16 +31,16 @@ class InvoiceRequest extends EntityRequest
if(request()->is('quotes/*/edit') && request()->isMethod('get') && $this->user()->can('edit', $invoice))
return true;
if(request()->is('invoices/create') && $this->user()->can('create', ENTITY_INVOICE))
if(request()->is('invoices/create*') && $this->user()->can('create', ENTITY_INVOICE))
return true;
if(request()->is('invoices/create') && !$this->user()->can('create', ENTITY_INVOICE))
if(request()->is('invoices/create*') && !$this->user()->can('create', ENTITY_INVOICE))
return false;
if(request()->is('recurring_invoices/create') && !$this->user()->can('create', ENTITY_RECURRING_INVOICE))
return false;
if(request()->is('quotes/create') && !$this->user()->can('create', ENTITY_QUOTE))
if(request()->is('quotes/create*') && !$this->user()->can('create', ENTITY_QUOTE))
return false;
if(request()->is('invoices/*/edit') && request()->isMethod('put') && !$this->user()->can('edit', $standardOrRecurringInvoice))