From 5661c136f57502957eb284c47fea40e3c51d837c Mon Sep 17 00:00:00 2001
From: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com>
Date: Fri, 2 Jan 2026 19:51:09 +0100
Subject: [PATCH] fix: ensure authorization check for server view in mount
 method

---
 app/Livewire/SharedVariables/Server/Show.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/app/Livewire/SharedVariables/Server/Show.php b/app/Livewire/SharedVariables/Server/Show.php
index 1dd9f9d46..6078ef36f 100644
--- a/app/Livewire/SharedVariables/Server/Show.php
+++ b/app/Livewire/SharedVariables/Server/Show.php
@@ -52,9 +52,10 @@ public function mount()
         $serverUuid = request()->route('server_uuid');
         $teamId = currentTeam()->id;
         $server = Server::where('team_id', $teamId)->where('uuid', $serverUuid)->first();
-        if (!$server) {
+        if (! $server) {
             return redirect()->route('dashboard');
         }
+        $this->authorize('view', $server);
         $this->server = $server;
         $this->getDevView();
     }
@@ -180,4 +181,4 @@ public function render()
     {
         return view('livewire.shared-variables.server.show');
     }
-}
\ No newline at end of file
+}