diff --git a/app/Http/Controllers/UserController.php b/app/Http/Controllers/UserController.php index 3d1bf2e1d44d..e2c4008b3a35 100644 --- a/app/Http/Controllers/UserController.php +++ b/app/Http/Controllers/UserController.php @@ -158,7 +158,7 @@ class UserController extends BaseController */ public function create(CreateUserRequest $request) { - $user = UserFactory::create(auth()->user()->account->id); + $user = UserFactory::create(auth()->user()->account_id); return $this->itemResponse($user); } diff --git a/app/Jobs/Mail/NinjaMailerJob.php b/app/Jobs/Mail/NinjaMailerJob.php index 80d1837da553..fe5576fbc53b 100644 --- a/app/Jobs/Mail/NinjaMailerJob.php +++ b/app/Jobs/Mail/NinjaMailerJob.php @@ -200,6 +200,14 @@ class NinjaMailerJob implements ShouldQueue $user = User::find($this->decodePrimaryKey($sending_user)); + /* Always ensure the user is set on the correct account */ + if($user->account_id != $this->company->account_id){ + + $this->nmo->settings->email_sending_method = 'default'; + return $this->setMailDriver(); + + } + nlog("Sending via {$user->name()}"); $token = $this->refreshOfficeToken($user); @@ -236,6 +244,14 @@ class NinjaMailerJob implements ShouldQueue $user = User::find($this->decodePrimaryKey($sending_user)); + /* Always ensure the user is set on the correct account */ + if($user->account_id != $this->company->account_id){ + + $this->nmo->settings->email_sending_method = 'default'; + return $this->setMailDriver(); + + } + nlog("Sending via {$user->name()}"); $google = (new Google())->init(); diff --git a/routes/api.php b/routes/api.php index e37eabb84bfa..38aa0208f46e 100644 --- a/routes/api.php +++ b/routes/api.php @@ -212,6 +212,7 @@ Route::group(['middleware' => ['throttle:100,1', 'api_db', 'token_auth', 'locale Route::get('purchase_orders/{purchase_order}/{action}', 'PurchaseOrderController@action')->name('purchase_orders.action'); Route::get('users', 'UserController@index'); + Route::get('users/create', 'UserController@create')->middleware('password_protected'); Route::get('users/{user}', 'UserController@show')->middleware('password_protected'); Route::put('users/{user}', 'UserController@update')->middleware('password_protected'); Route::post('users', 'UserController@store')->middleware('password_protected');