From 024c853b9ffe3dbcb24ef462547eed5e9ade3a24 Mon Sep 17 00:00:00 2001 From: David Bomba Date: Sat, 6 Oct 2018 08:35:48 +1000 Subject: [PATCH] Permissions fixes (#2428) --- app/Http/Requests/InvoiceRequest.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/app/Http/Requests/InvoiceRequest.php b/app/Http/Requests/InvoiceRequest.php index 60bb5a481..6b0ac6dd4 100644 --- a/app/Http/Requests/InvoiceRequest.php +++ b/app/Http/Requests/InvoiceRequest.php @@ -31,16 +31,16 @@ class InvoiceRequest extends EntityRequest if(request()->is('quotes/*/edit') && request()->isMethod('get') && $this->user()->can('edit', $invoice)) return true; - if(request()->is('invoices/create') && $this->user()->can('create', ENTITY_INVOICE)) + if(request()->is('invoices/create*') && $this->user()->can('create', ENTITY_INVOICE)) return true; - if(request()->is('invoices/create') && !$this->user()->can('create', ENTITY_INVOICE)) + if(request()->is('invoices/create*') && !$this->user()->can('create', ENTITY_INVOICE)) return false; if(request()->is('recurring_invoices/create') && !$this->user()->can('create', ENTITY_RECURRING_INVOICE)) return false; - if(request()->is('quotes/create') && !$this->user()->can('create', ENTITY_QUOTE)) + if(request()->is('quotes/create*') && !$this->user()->can('create', ENTITY_QUOTE)) return false; if(request()->is('invoices/*/edit') && request()->isMethod('put') && !$this->user()->can('edit', $standardOrRecurringInvoice))