diff --git a/resources/views/pages/association/project-support/form/[ProjectProposal:slug].blade.php b/resources/views/pages/association/project-support/form/[ProjectProposal:slug].blade.php index 4db67ed..11f91fd 100644 --- a/resources/views/pages/association/project-support/form/[ProjectProposal:slug].blade.php +++ b/resources/views/pages/association/project-support/form/[ProjectProposal:slug].blade.php @@ -35,7 +35,10 @@ on([ 'nostrLoggedIn' => function ($pubkey) { $this->currentPubkey = $pubkey; $this->currentPleb = \App\Models\EinundzwanzigPleb::query()->where('pubkey', $pubkey)->first(); - if ($this->currentPleb->id !== $this->projectProposal->einundzwanzig_pleb_id) { + if ( + $this->currentPleb->id !== $this->projectProposal->einundzwanzig_pleb_id + || !in_array($this->currentPleb->npub, config('einundzwanzig.config.current_board'), true) + ) { return $this->js('alert("Du bist hierzu nicht berechtigt.")'); } $this->isAllowed = true;