rosslh/coolify
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(policy): update delete method to check for admin status in S3StoragePolicy

Browse source
This commit is contained in:
Andras Bacsai 2025-07-23 17:57:05 +02:00
parent 158711a165
commit 103a9c2df2
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
app/Policies/S3StoragePolicy.php
View file

@ -21,7 +21,7 @@ public function viewAny(User $user): bool
*/ */
public function view(User $user, S3Storage $storage): bool public function view(User $user, S3Storage $storage): bool
{ {
return $user->teams()->where('id', $storage->team_id)->exists(); return $user->teams()->get()->firstWhere('id', $storage->team_id)->exists();
} }
/** /**
@ -37,7 +37,7 @@ public function create(User $user): bool
*/ */
public function update(User $user, Server $server): bool public function update(User $user, Server $server): bool
{ {
return $user->teams()->get()->firstWhere('id', $server->team_id) !== null; return $user->teams()->get()->firstWhere('id', $server->team_id)->exists() && $user->isAdmin();
} }
/** /**
@ -45,7 +45,7 @@ public function update(User $user, Server $server): bool
*/ */
public function delete(User $user, S3Storage $storage): bool public function delete(User $user, S3Storage $storage): bool
{ {
return $user->teams()->where('id', $storage->team_id)->exists(); return $user->teams()->get()->firstWhere('id', $storage->team_id)->exists() && $user->isAdmin();
} }
/** /**