From 0ae2260951e8d72d9a8b32f999a2b110bd59be88 Mon Sep 17 00:00:00 2001 From: David Bomba Date: Sat, 21 Jan 2023 16:59:51 +1100 Subject: [PATCH] Tests around hasPermission --- app/Models/User.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/app/Models/User.php b/app/Models/User.php index 2b802e5e1e43..c8ebf0692297 100644 --- a/app/Models/User.php +++ b/app/Models/User.php @@ -365,6 +365,8 @@ class User extends Authenticatable implements MustVerifyEmail $all_permission = $parts[0].'_all'; } +//empty $all_permissions leads to stripos returning true; + return $this->isOwner() || $this->isAdmin() || (is_int(stripos($this->token()->cu->permissions, $all_permission))) ||