hotstovejer/openclassify
0
0
Fork 0
mirror of https://github.com/openclassify/openclassify.git synced 2026-01-24 22:11:01 -06:00
Code Issues Actions Packages Projects Releases Wiki Activity

#1008 If user role editor can't edit ads #297

Browse Source
This commit is contained in:
Diatrex 2020-03-26 13:53:30 +03:00
parent c3c63c1820
commit 94af6de8c1
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
addons/default/visiosoft/advs-module/resources/views/ad-detail/partials/dropleft-edit.twig
View File

@ -1,4 +1,4 @@
{% if app.auth.id == adv.created_by_id %} {% if auth_user().id == adv.created_by_id or auth_user().hasPermission('visiosoft.module.advs::advs.write') %}
<div class="btn-group dropleft dropleft-edit position-fixed"> <div class="btn-group dropleft dropleft-edit position-fixed">
<button type="button" class="btn btn-secondary dropdown-toggle" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false"> <button type="button" class="btn btn-secondary dropdown-toggle" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
{{ trans('visiosoft.module.advs::field.ad_actions') }} {{ trans('visiosoft.module.advs::field.ad_actions') }}

4
addons/default/visiosoft/advs-module/src/Http/Controller/advsController.php
View File

@ -642,8 +642,8 @@ class AdvsController extends PublicController
$isActive = new AdvModel(); $isActive = new AdvModel();
$adv = $advRepository->getAdvArray($id); $adv = $advRepository->getAdvArray($id);
if ($adv['created_by_id'] != auth()->id()
if ($adv['created_by_id'] != Auth::id() && !Auth::user()->hasRole('admin')) { && !auth()->user()->hasPermission('visiosoft.module.advs::advs.write')) {
abort(403); abort(403);
} }
$cats_d = array(); $cats_d = array();