Mirrors/invoiceninja
1
0
Fork 0
mirror of https://github.com/invoiceninja/invoiceninja.git synced 2024-11-13 22:54:25 +01:00
Code Issues Releases Activity

Tests around hasPermission

Browse Source
This commit is contained in:
David Bomba 2023-01-21 16:59:51 +11:00
parent c1563c571d
commit 0ae2260951
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
app/Models/User.php
View File

@ -365,6 +365,8 @@ class User extends Authenticatable implements MustVerifyEmail
$all_permission = $parts[0].'_all'; $all_permission = $parts[0].'_all';
} }
//empty $all_permissions leads to stripos returning true;
return $this->isOwner() || return $this->isOwner() ||
$this->isAdmin() || $this->isAdmin() ||
(is_int(stripos($this->token()->cu->permissions, $all_permission))) || (is_int(stripos($this->token()->cu->permissions, $all_permission))) ||