Cutlery/invoiceninja
1
0
Fork 0
mirror of https://github.com/invoiceninja/invoiceninja.git synced 2025-07-09 03:14:30 -04:00
Code Issues Packages Projects Releases Wiki Activity

Updates for low permission users attempting to generate reports

Browse Source
This commit is contained in:
David Bomba 2023-08-10 19:53:35 +10:00
parent 1c909d6c60
commit 8e5fba6943
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
app/Http/Requests/Report/GenericReportRequest.php
View File

@ -22,7 +22,11 @@ class GenericReportRequest extends Request
*/ */
public function authorize() : bool public function authorize() : bool
{ {
return auth()->user()->isAdmin(); /** @var \App\Models\User $user */
$user = auth()->user();
return $user->isAdmin() || $user->hasPermission('view_reports');
} }
public function rules() public function rules()