Leahnaya/Deathgarden_Rebirth-Rewrite
1
0
Fork 0
mirror of https://github.com/Deathgarden-Rebirth/Deathgarden_Rebirth-Rewrite.git synced 2026-09-09 19:55:22 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Small Hotifx, added missing permission checks for user list and details page.

Browse Source
This commit is contained in:
Vari
2024-04-28 12:15:59 +02:00
parent e03b0ff9a3
commit 681464ae23
2 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
dist/app/Http/Controllers/Web/Admin/Tools/UsersController.php vendored
View File

@@ -26,6 +26,9 @@ class UsersController extends AdminToolController
public function index(Request $request)
{
if(!Auth::user()->can(Permissions::VIEW_USERS->value))
abort(403, 'No Permission to view this Page');
$searchString = $request->input('search');
$query = User::orderBy('last_known_username');
@@ -42,6 +45,9 @@ public function index(Request $request)
public function details(User $user)
{
if(!Auth::user()->can(Permissions::VIEW_USERS->value))
abort(403, 'No Permission to view this Page');
View::share('title', 'User Details: '.$user->last_known_username);
return view('admin.tools.user-details', [
@@ -83,7 +89,7 @@ public function reset(User $user)
$canReset = Auth::check() && Auth::user()->can(Permissions::EDIT_USERS->value);
if(!$canReset)
return response('You dont have the Permission for this.', 403);
abort(403, 'You dont have enough permissions for this action.');
$user->playerData()->delete();
return redirect()->back();