allerta-vvf
/
allerta-vvf
mirror of https://github.com/allerta-vvf/allerta-vvf
1
0
Fork 0
Code Issues Releases Wiki Activity

Update permission check for training course type controller

This commit is contained in:
Matteo Gheza 2024-01-09 17:27:19 +01:00
parent 2bd9ecaacf
commit 815115beb0
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
backend/app/Http/Controllers/TrainingCourseTypeController.php
View File

@ -14,7 +14,7 @@ class TrainingCourseTypeController extends Controller
*/
public function index(Request $request)
{
if(!$request->user()->hasPermission("users-read") && !$request->user()->hasPermission("user-read")) abort(401);
if(!$request->user()->hasPermission("users-add-training-course") && !$request->user()->hasPermission("user-add-training-course")) abort(401);
User::where('id', $request->user()->id)->update(['last_access' => now()]);
return response()->json(