DRCIT/snipe-it
1
0
Fork 0
mirror of https://github.com/snipe/snipe-it.git synced 2024-12-25 05:34:06 -08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Protect users routes

Browse source
This commit is contained in:
snipe 2016-06-15 20:45:57 -07:00
parent 6a277a5391
commit e2789b2951
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
app/Http/routes.php
View file

@ -625,7 +625,7 @@ Route::group([ 'prefix' => 'admin','middleware' => ['web','auth']], function ()
Route::resource('custom_fields', 'CustomFieldsController');
# User Management
Route::group([ 'prefix' => 'users' ], function () {
Route::group([ 'prefix' => 'users', 'middleware' => ['web','auth','authorize:users.view']], function () {
Route::get('ldap', ['as' => 'ldap/user', 'uses' => 'UsersController@getLDAP' ]);
Route::post('ldap', 'UsersController@postLDAP');
@ -671,7 +671,7 @@ Route::group([ 'prefix' => 'admin','middleware' => ['web','auth']], function ()
});
# Group Management
Route::group([ 'prefix' => 'groups' ], function () {
Route::group([ 'prefix' => 'groups', 'middleware' => ['web','auth','authorize:superadmin'] ], function () {
Route::get('/', [ 'as' => 'groups', 'uses' => 'GroupsController@getIndex' ]);
Route::get('create', [ 'as' => 'create/group', 'uses' => 'GroupsController@getCreate' ]);