einundzwanzig/einundzwanzig-verein
1
0
Fork 0
mirror of https://github.com/HolgerHatGarKeineNode/einundzwanzig-nostr.git synced 2025-12-13 05:26:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

🚧 fix(association): update authorization check for project proposal based on currentPleb membership and pubkey

Browse Source
This commit is contained in:
fsociety
2024-10-25 12:21:12 +02:00
parent f297605995
commit ceefbe41ba
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
resources/views/pages/association/project-support/form/[ProjectProposal:slug].blade.php
View File

@@ -37,7 +37,7 @@ on([
$this->currentPleb = \App\Models\EinundzwanzigPleb::query()->where('pubkey', $pubkey)->first(); $this->currentPleb = \App\Models\EinundzwanzigPleb::query()->where('pubkey', $pubkey)->first();
if ( if (
$this->currentPleb->id !== $this->projectProposal->einundzwanzig_pleb_id $this->currentPleb->id !== $this->projectProposal->einundzwanzig_pleb_id
|| !in_array($this->currentPleb->npub, config('einundzwanzig.config.current_board'), true) && !in_array($this->currentPleb->npub, config('einundzwanzig.config.current_board'), true)
) { ) {
return $this->js('alert("Du bist hierzu nicht berechtigt.")'); return $this->js('alert("Du bist hierzu nicht berechtigt.")');
} }