mirror of
https://github.com/invoiceninja/invoiceninja.git
synced 2025-07-09 03:14:30 -04:00
Fixes for payment activities
This commit is contained in:
parent
54b64fe6ad
commit
e21b6f3a55
@ -22,6 +22,9 @@ class ShowCompanyRequest extends Request
|
||||
*/
|
||||
public function authorize() : bool
|
||||
{
|
||||
return auth()->user()->can('view', $this->company);
|
||||
/** @var \App\Models\User $user */
|
||||
$user = auth()->user();
|
||||
|
||||
return $user->company()->id == $this->company->id;
|
||||
}
|
||||
}
|
||||
|
@ -47,6 +47,7 @@ class InvoicePaidActivity implements ShouldQueue
|
||||
|
||||
$fields->user_id = $user_id;
|
||||
$fields->invoice_id = $event->invoice->id;
|
||||
$fields->client_id = $event->invoice->client_id;
|
||||
$fields->company_id = $event->invoice->company_id;
|
||||
$fields->activity_type_id = Activity::PAID_INVOICE;
|
||||
$fields->payment_id = $event->payment->id;
|
||||
|
@ -43,7 +43,8 @@ class CompanyPolicy extends EntityPolicy
|
||||
return ($user->isAdmin() && $entity->id == $user->companyId())
|
||||
|| ($user->hasPermission('view_'.strtolower(class_basename($entity))) && $entity->id == $user->companyId())
|
||||
// || ($user->hasPermission('view_all') && $entity->id == $user->companyId())
|
||||
|| $user->owns($entity);
|
||||
|| $user->owns($entity)
|
||||
|| $user->companyId() == $entity->id;
|
||||
}
|
||||
|
||||
/**
|
||||
|
Loading…
x
Reference in New Issue
Block a user