From 11c45805fa192237f5fbfe2549f6c1169dfb6d0d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=A9r=C3=A9my=20Munsch?= Date: Tue, 27 Jul 2021 16:28:49 +0200 Subject: [PATCH] more fix ticket policy --- app/Policies/TicketPolicy.php | 15 ++++++++++++--- 1 file changed, 12 insertions(+), 3 deletions(-) diff --git a/app/Policies/TicketPolicy.php b/app/Policies/TicketPolicy.php index 3cd7133..e49d075 100644 --- a/app/Policies/TicketPolicy.php +++ b/app/Policies/TicketPolicy.php @@ -33,14 +33,23 @@ class TicketPolicy extends RootPolicy */ $this->policies = [ 'ticket' => [ - 'viewAny' => URR::make('allowEveryOne'), - 'view' => URR::make('allowEveryOne'), + 'viewAny' => StaticRules::or([ + URR::make('userIsAdmin', $user), + SSR::make('userSitesHasTicket', $user, $model) + ]), + 'view' => StaticRules::or([ + URR::make('userIsAdmin', $user), + SSR::make('userSitesHasTicket', $user, $model) + ]), 'update' => StaticRules::or([ URR::make('userIsAdmin', $user), SSR::make('userSitesHasTicket', $user, $model) ]), 'changeStatus' => URR::make('userIsAdmin', $user), - 'create' => URR::make('allowEveryOne'), + 'create' => StaticRules::or([ + URR::make('userIsAdmin', $user), + SSR::make('userSitesHasTicket', $user, $model) + ]), 'delete' => URR::make('denyEveryOne'), 'forceDelete' => URR::make('denyEveryOne'), 'restore' => StaticRules::or([