forge-joniko/ldc-supportweb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix Schedule autorisation hole

Browse source
This commit is contained in:
Jérémy Munsch 2022-05-26 13:18:47 +02:00
parent 75b4f762b1
commit 7d7bc5843a
No known key found for this signature in database
GPG key ID: 18361AF3BFEC0FEC
2 changed files with 18 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
app/Http/Controllers/ScheduleController.php
View file

@ -17,6 +17,15 @@ use Carbon\CarbonImmutable;
*/
class ScheduleController extends Controller
{
/**
* ScheduleController
*/
public function __construct()
{
parent::__construct();
$this->middleware('is-admin');
}
public function index(Request $request)
{
$date = CarbonImmutable::now()->startOfWeek();

10
resources/views/layout/nav.blade.php
View file

@ -11,19 +11,27 @@
@auth
<div class="collapse navbar-collapse" id="navbarSupportedContent">
<ul class="navbar-nav me-auto">
@if (Auth::user()->isAdmin())
@can('viewAny', App\Models\Ticket::class)
<li class="nav-item">
<a class="nav-link @if(strpos(request()->route()->getName(), 'ticket') === 0)active @endif" href="{{ route('ticket.index') }}">Tickets</a>
</li>
@endcan
@can('viewAny', App\Models\Site::class)
<li class="nav-item">
<a class="nav-link @if(strpos(request()->route()->getName(), 'sites') === 0)active @endif" href="{{ route('sites.index') }}">Sites</a>
</li>
@endcan
@can('viewAny', App\Models\Project::class)
<li class="nav-item">
<a class="nav-link @if(strpos(request()->route()->getName(), 'projects') === 0)active @endif" href="{{ route('projects.index') }}">Projets</a>
</li>
@endcan
@can('viewAny', App\Models\User::class)
<li class="nav-item">
<a class="nav-link @if(strpos(request()->route()->getName(), 'users') === 0)active @endif" href="{{ route('users.index') }}">Utilisateurs</a>
</li>
@endcan
@if(Auth::user()->isAdmin())
<li class="nav-item">
<a class="nav-link @if(strpos(request()->route()->getName(), 'schedule') === 0)active @endif" href="{{ route('schedule.index') }}">{{ __('Planning') }}</a>
</li>