From da47f1bf321d0f8d1557e04b9d5253e1862a9966 Mon Sep 17 00:00:00 2001 From: David Bomba Date: Mon, 28 Mar 2022 13:06:46 +1100 Subject: [PATCH] Documentation for listResponse end point --- app/Http/Controllers/BaseController.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/app/Http/Controllers/BaseController.php b/app/Http/Controllers/BaseController.php index 6d5196d536c3..67973e1bf0d0 100644 --- a/app/Http/Controllers/BaseController.php +++ b/app/Http/Controllers/BaseController.php @@ -623,8 +623,8 @@ class BaseController extends Controller $query->with($includes); // 10-01-2022 need to ensure we snake case properly here to ensure permissions work as expected - // if (auth()->user() && ! auth()->user()->hasPermission('view_'.lcfirst(class_basename($this->entity_type)))) { - if (auth()->user() && ! auth()->user()->hasPermission('view_'.lcfirst(class_basename(Str::snake($this->entity_type))))) { + // 28-03-2022 this is definitely correct here, do not append _ to the view, it resolved correctly when snake cased + if (auth()->user() && ! auth()->user()->hasPermission('view'.lcfirst(class_basename(Str::snake($this->entity_type))))) { $query->where('user_id', '=', auth()->user()->id); }