Browse Source

Update authorization check on create and delete task

pull/7/head
Nafies Luthfi 8 years ago
parent
commit
428b501763
  1. 3
      app/Http/Requests/Tasks/CreateRequest.php
  2. 5
      app/Http/Requests/Tasks/DeleteRequest.php

3
app/Http/Requests/Tasks/CreateRequest.php

@ -2,6 +2,7 @@
namespace App\Http\Requests\Tasks;
use App\Entities\Projects\Task;
use App\Http\Requests\Request;
class CreateRequest extends Request
@ -13,7 +14,7 @@ class CreateRequest extends Request
*/
public function authorize()
{
return auth()->user()->can('manage_agency');
return auth()->user()->can('create', new Task());
}
/**

5
app/Http/Requests/Tasks/DeleteRequest.php

@ -2,6 +2,7 @@
namespace App\Http\Requests\Tasks;
use App\Entities\Projects\Task;
use App\Http\Requests\Request;
class DeleteRequest extends Request
@ -13,7 +14,9 @@ class DeleteRequest extends Request
*/
public function authorize()
{
return auth()->user()->can('manage_agency');
$task = Task::findOrFail($this->segment(2));
return auth()->user()->can('delete', $task);
}
/**

Loading…
Cancel
Save