Leahnaya/Deathgarden_Rebirth-Rewrite
1
0
Fork 0
mirror of https://github.com/Deathgarden-Rebirth/Deathgarden_Rebirth-Rewrite.git synced 2026-09-09 03:35:14 -05:00
Code Issues Actions Packages Projects Releases Wiki Activity

Added permission check to bans page to only allow it when the user has the EDIT_USERS permission.

Browse Source
This commit is contained in:
Vari
2024-05-20 05:06:46 +02:00
parent 4f865b4d2a
commit a1cd7e3798
3 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
dist/app/Http/Controllers/Web/Admin/Tools/UsersController.php vendored
View File

@@ -101,6 +101,9 @@ public function reset(User $user)
public function bans(User $user)
{
if(!Auth::user()->can(Permissions::EDIT_USERS->value))
abort(403, 'You are not allowed to edit Bans of a User.');
$bans = $user->bans;
View::share('title', 'Bans for User: '.$user->id.'('.$user->last_known_username.')');
@@ -128,6 +131,9 @@ public function banPost(User $user, Ban $ban, BanPostRequest $request) {
}
public function createBan(User $user) {
if(!Auth::user()->can(Permissions::EDIT_USERS->value))
abort(403, 'No Permission to create a Ban.');
$newBan = new Ban();
$newBan->ban_reason = 'Placeholder';
$newBan->start_date = Carbon::now()->addWeek();