shihaam/akaunting
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'master' of github.com:akaunting/akaunting

Browse Source
This commit is contained in:
Cüneyt Şentürk 2020-09-07 12:52:12 +03:00
commit 21ca967151
2 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/Http/Controllers/Settings/Settings.php
View File

@ -54,7 +54,9 @@ class Settings extends Controller
$settings = []; $settings = [];
foreach ($modules->settings as $alias => $setting) { foreach ($modules->settings as $alias => $setting) {
if (!user()->can('read-' . $alias . '-settings')) { $permission = !empty($setting['permission']) ? $setting['permission'] : 'read-' . $alias . '-settings';
if (!user()->can($permission)) {
continue; continue;
} }

4
app/Http/Requests/Portal/InvoiceShow.php
View File

@ -13,6 +13,10 @@ class InvoiceShow extends FormRequest
*/ */
public function authorize() public function authorize()
{ {
if (auth()->guest()) {
return true;
}
return $this->invoice->contact_id == user()->contact->id; return $this->invoice->contact_id == user()->contact->id;
} }