Browse Source

Update authorization check on create and delete task

pull/7/head
Nafies Luthfi 8 years ago
parent
commit
428b501763
  1. 3
      app/Http/Requests/Tasks/CreateRequest.php
  2. 5
      app/Http/Requests/Tasks/DeleteRequest.php

3
app/Http/Requests/Tasks/CreateRequest.php

@ -2,6 +2,7 @@
namespace App\Http\Requests\Tasks; namespace App\Http\Requests\Tasks;
use App\Entities\Projects\Task;
use App\Http\Requests\Request; use App\Http\Requests\Request;
class CreateRequest extends Request class CreateRequest extends Request
@ -13,7 +14,7 @@ class CreateRequest extends Request
*/ */
public function authorize() public function authorize()
{ {
return auth()->user()->can('manage_agency');
return auth()->user()->can('create', new Task());
} }
/** /**

5
app/Http/Requests/Tasks/DeleteRequest.php

@ -2,6 +2,7 @@
namespace App\Http\Requests\Tasks; namespace App\Http\Requests\Tasks;
use App\Entities\Projects\Task;
use App\Http\Requests\Request; use App\Http\Requests\Request;
class DeleteRequest extends Request class DeleteRequest extends Request
@ -13,7 +14,9 @@ class DeleteRequest extends Request
*/ */
public function authorize() public function authorize()
{ {
return auth()->user()->can('manage_agency');
$task = Task::findOrFail($this->segment(2));
return auth()->user()->can('delete', $task);
} }
/** /**

Loading…
Cancel
Save