Browse Source

Prevent user from deleting their own profile

pull/16/head
Nafies Luthfi 8 years ago
parent
commit
f7b22f75f3
  1. 2
      app/Policies/UserPolicy.php
  2. 8
      tests/Unit/Policies/UserPolicyTest.php

2
app/Policies/UserPolicy.php

@ -16,6 +16,6 @@ class UserPolicy
public function delete(User $user, User $editableUser)
{
return $editableUser->manager_id == $user->id;
return $editableUser->manager_id == $user->id && $editableUser->id != $user->id;
}
}

8
tests/Unit/Policies/UserPolicyTest.php

@ -35,4 +35,12 @@ class UserPolicyTest extends TestCase
$this->assertTrue($manager->can('delete', $user));
}
/** @test */
public function user_cannot_delete_their_own_data()
{
$user = factory(User::class)->create();
$this->assertFalse($user->can('delete', $user));
}
}
Loading…
Cancel
Save