1
0
mirror of https://github.com/invoiceninja/invoiceninja.git synced 2024-09-19 16:01:34 +02:00

Permissions fixes

This commit is contained in:
David Bomba 2018-10-06 08:33:33 +10:00
parent e254cf3833
commit 881977003c

View File

@ -31,16 +31,16 @@ class InvoiceRequest extends EntityRequest
if(request()->is('quotes/*/edit') && request()->isMethod('get') && $this->user()->can('edit', $invoice)) if(request()->is('quotes/*/edit') && request()->isMethod('get') && $this->user()->can('edit', $invoice))
return true; return true;
if(request()->is('invoices/create') && $this->user()->can('create', ENTITY_INVOICE)) if(request()->is('invoices/create*') && $this->user()->can('create', ENTITY_INVOICE))
return true; return true;
if(request()->is('invoices/create') && !$this->user()->can('create', ENTITY_INVOICE)) if(request()->is('invoices/create*') && !$this->user()->can('create', ENTITY_INVOICE))
return false; return false;
if(request()->is('recurring_invoices/create') && !$this->user()->can('create', ENTITY_RECURRING_INVOICE)) if(request()->is('recurring_invoices/create') && !$this->user()->can('create', ENTITY_RECURRING_INVOICE))
return false; return false;
if(request()->is('quotes/create') && !$this->user()->can('create', ENTITY_QUOTE)) if(request()->is('quotes/create*') && !$this->user()->can('create', ENTITY_QUOTE))
return false; return false;
if(request()->is('invoices/*/edit') && request()->isMethod('put') && !$this->user()->can('edit', $standardOrRecurringInvoice)) if(request()->is('invoices/*/edit') && request()->isMethod('put') && !$this->user()->can('edit', $standardOrRecurringInvoice))