DRCIT/snipe-it
1
0
Fork 0
mirror of https://github.com/snipe/snipe-it.git synced 2025-01-12 14:27:33 -08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Merge pull request #11058 from snipe/fixes/kit_permissions

Browse source 
Fixed kit checkout permissions if admin is not superadmin
This commit is contained in:
snipe 2022-05-11 20:11:13 -07:00 committed by GitHub
parent f4650c65db c52faaf23d
commit 722e88a472
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 13 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
app/Http/Controllers/Kits/CheckoutKitController.php
View file

@ -4,6 +4,7 @@ namespace App\Http\Controllers\Kits;
use App\Http\Controllers\CheckInOutRequest; use App\Http\Controllers\CheckInOutRequest;
use App\Http\Controllers\Controller; use App\Http\Controllers\Controller;
use App\Models\PredefinedKit; use App\Models\PredefinedKit;
use App\Models\Asset;
use App\Models\PredefinedLicence; use App\Models\PredefinedLicence;
use App\Models\PredefinedModel; use App\Models\PredefinedModel;
use App\Models\User; use App\Models\User;

12
app/Policies/SnipePermissionsPolicy.php
View file

@ -83,6 +83,18 @@ abstract class SnipePermissionsPolicy
return $user->hasAccess($this->columnName().'.edit'); return $user->hasAccess($this->columnName().'.edit');
} }
/**
* Determine whether the user can update the accessory.
*
* @param \App\Models\User $user
* @return mixed
*/
public function checkout(User $user, $item = null)
{
return $user->hasAccess($this->columnName().'.checkout');
}
/** /**
* Determine whether the user can delete the accessory. * Determine whether the user can delete the accessory.
* *

7
config/permissions.php
View file

@ -292,13 +292,6 @@ return array(
'note' => '', 'note' => '',
'display' => true, 'display' => true,
), ),
array(
'permission' => 'kits.checkout',
'label' => 'Checkout ',
'note' => '',
'display' => true,
),
), ),