From 539c3023b983c23e3c36d91f742625517e17cf99 Mon Sep 17 00:00:00 2001
From: snipe <snipe@snipe.net>
Date: Mon, 15 Oct 2018 16:52:45 -0700
Subject: [PATCH] Added - check whether the user can edit an asset before
 allowing them to change the name on checkout

---
 resources/views/hardware/checkout.blade.php | 18 +++++++++++-------
 1 file changed, 11 insertions(+), 7 deletions(-)

diff --git a/resources/views/hardware/checkout.blade.php b/resources/views/hardware/checkout.blade.php
index 4a5203c36d..1ee1c9d249 100755
--- a/resources/views/hardware/checkout.blade.php
+++ b/resources/views/hardware/checkout.blade.php
@@ -37,13 +37,17 @@
             @endif
 
             <!-- Asset Name -->
-            <div class="form-group {{ $errors->has('name') ? 'error' : '' }}">
-              {{ Form::label('name', trans('admin/hardware/form.name'), array('class' => 'col-md-3 control-label')) }}
-              <div class="col-md-8">
-                <input class="form-control" type="text" name="name" id="name" value="{{ Input::old('name', $asset->name) }}" tabindex="1">
-                {!! $errors->first('name', '<span class="alert-msg"><i class="fa fa-times"></i> :message</span>') !!}
-              </div>
-            </div>
+            <!-- Only allow an asset name to be changed if the checker-outer has permission to edit the asset -->
+            @can('update', $asset)
+                <div class="form-group {{ $errors->has('name') ? 'error' : '' }}">
+                  {{ Form::label('name', trans('admin/hardware/form.name'), array('class' => 'col-md-3 control-label')) }}
+                  <div class="col-md-8">
+                    <input class="form-control" type="text" name="name" id="name" value="{{ Input::old('name', $asset->name) }}" tabindex="1">
+                    {!! $errors->first('name', '<span class="alert-msg"><i class="fa fa-times"></i> :message</span>') !!}
+                  </div>
+                </div>
+            @endcan
+
                 @include ('partials.forms.checkout-selector', ['user_select' => 'true','asset_select' => 'true', 'location_select' => 'true'])
 
                 @include ('partials.forms.edit.user-select', ['translated_name' => trans('general.user'), 'fieldname' => 'assigned_user', 'required'=>'true'])