diff --git a/app/Http/Controllers/Common/BulkActions.php b/app/Http/Controllers/Common/BulkActions.php index bdf0a437a..ac7d249b4 100644 --- a/app/Http/Controllers/Common/BulkActions.php +++ b/app/Http/Controllers/Common/BulkActions.php @@ -29,6 +29,18 @@ BulkActions extends Controller $bulk_actions = app('App\BulkActions\\' . ucfirst($group) . '\\' . ucfirst($type)); } + if (isset($bulk_actions->actions[$request->get('handle')]['permission']) && !user()->can($bulk_actions->actions[$request->get('handle')]['permission'])) { + flash(trans('errors.message.403'))->error(); + + return response()->json([ + 'success' => false, + 'redirect' => true, + 'error' => true, + 'data' => [], + 'message' => trans('errors.message.403') + ]); + } + $result = $bulk_actions->{$request->get('handle')}($request); if (!empty($result) && ($result instanceof \Symfony\Component\HttpFoundation\BinaryFileResponse)) { diff --git a/resources/views/partials/form/bulk_action_row_group.blade.php b/resources/views/partials/form/bulk_action_row_group.blade.php index 9d247d66b..b20e419b2 100644 --- a/resources/views/partials/form/bulk_action_row_group.blade.php +++ b/resources/views/partials/form/bulk_action_row_group.blade.php @@ -1,16 +1,16 @@ @stack('bulk_action_row_input_start') - @php - if (is_array($path)) { - $path = route('bulk-actions.action', $path); - } else { - $path = url('common/bulk-actions/' . $path); - } - @endphp +@php + if (is_array($path)) { + $path = route('bulk-actions.action', $path); + } else { + $path = url('common/bulk-actions/' . $path); + } +@endphp -