Merge pull request #6872 from coollabsio/andrasbacsai/db-general-auth-check

fix: add authorization checks to database Livewire components

app/Livewire/Project/Database/BackupEdit.php

@@ -85,6 +85,7 @@ class BackupEdit extends Component
     public function mount()
     {
         try {
+            $this->authorize('view', $this->backup->database);
             $this->parameters = get_route_parameters();
             $this->syncData();
         } catch (Exception $e) {

app/Livewire/Project/Database/Clickhouse/General.php

@@ -56,6 +56,7 @@ public function getListeners()
     public function mount()
     {
         try {
+            $this->authorize('view', $this->database);
             $this->syncData();
             $this->server = data_get($this->database, 'destination.server');
             if (! $this->server) {

app/Livewire/Project/Database/Configuration.php

@@ -3,10 +3,12 @@
 namespace App\Livewire\Project\Database;
 
 use Auth;
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
 use Livewire\Component;
 
 class Configuration extends Component
 {
+    use AuthorizesRequests;
     public $currentRoute;
 
     public $database;
@@ -42,6 +44,8 @@ public function mount()
                 ->where('uuid', request()->route('database_uuid'))
                 ->firstOrFail();
 
+            $this->authorize('view', $database);
+
             $this->database = $database;
             $this->project = $project;
             $this->environment = $environment;

app/Livewire/Project/Database/Dragonfly/General.php

@@ -62,6 +62,7 @@ public function getListeners()
     public function mount()
     {
         try {
+            $this->authorize('view', $this->database);
             $this->syncData();
             $this->server = data_get($this->database, 'destination.server');
             if (! $this->server) {

app/Livewire/Project/Database/Import.php

@@ -131,6 +131,7 @@ public function getContainers()
         if (is_null($resource)) {
             abort(404);
         }
+        $this->authorize('view', $resource);
         $this->resource = $resource;
         $this->server = $this->resource->destination->server;
         $this->container = $this->resource->uuid;

app/Livewire/Project/Database/Keydb/General.php

@@ -64,6 +64,7 @@ public function getListeners()
     public function mount()
     {
         try {
+            $this->authorize('view', $this->database);
             $this->syncData();
             $this->server = data_get($this->database, 'destination.server');
             if (! $this->server) {

app/Livewire/Project/Database/Mariadb/General.php

@@ -122,6 +122,7 @@ protected function messages(): array
     public function mount()
     {
         try {
+            $this->authorize('view', $this->database);
             $this->syncData();
             $this->server = data_get($this->database, 'destination.server');
             if (! $this->server) {

app/Livewire/Project/Database/Mongodb/General.php

@@ -122,6 +122,7 @@ protected function messages(): array
     public function mount()
     {
         try {
+            $this->authorize('view', $this->database);
             $this->syncData();
             $this->server = data_get($this->database, 'destination.server');
             if (! $this->server) {

app/Livewire/Project/Database/Mysql/General.php

@@ -127,6 +127,7 @@ protected function messages(): array
     public function mount()
     {
         try {
+            $this->authorize('view', $this->database);
             $this->syncData();
             $this->server = data_get($this->database, 'destination.server');
             if (! $this->server) {

app/Livewire/Project/Database/Postgresql/General.php

@@ -140,6 +140,7 @@ protected function messages(): array
     public function mount()
     {
         try {
+            $this->authorize('view', $this->database);
             $this->syncData();
             $this->server = data_get($this->database, 'destination.server');
             if (! $this->server) {

app/Livewire/Project/Database/Redis/General.php

@@ -115,6 +115,7 @@ protected function messages(): array
     public function mount()
     {
         try {
+            $this->authorize('view', $this->database);
             $this->syncData();
             $this->server = data_get($this->database, 'destination.server');
             if (! $this->server) {