🚧 fix(association): update authorization check for project proposal based on currentPleb membership and pubkey

This commit is contained in:
fsociety
2024-10-25 12:21:12 +02:00
parent f297605995
commit ceefbe41ba

View File

@@ -37,7 +37,7 @@ on([
$this->currentPleb = \App\Models\EinundzwanzigPleb::query()->where('pubkey', $pubkey)->first();
if (
$this->currentPleb->id !== $this->projectProposal->einundzwanzig_pleb_id
|| !in_array($this->currentPleb->npub, config('einundzwanzig.config.current_board'), true)
&& !in_array($this->currentPleb->npub, config('einundzwanzig.config.current_board'), true)
) {
return $this->js('alert("Du bist hierzu nicht berechtigt.")');
}