diff --git a/app/Http/Requests/Portal/InvoiceShow.php b/app/Http/Requests/Portal/InvoiceShow.php index 063821d83..73c528181 100644 --- a/app/Http/Requests/Portal/InvoiceShow.php +++ b/app/Http/Requests/Portal/InvoiceShow.php @@ -13,6 +13,10 @@ class InvoiceShow extends FormRequest */ public function authorize() { + if (auth()->guest()) { + return true; + } + return $this->invoice->contact_id == user()->contact->id; }