snipe-it/app/Http
Till Deeke 48bbbe0f40 Fixing authorization issues (#5807)
* adds permission checks for companies

* adds permission checks for depreciations

* adds permission check for all reports

* fixes permissions for departments

* fixes permission naming (edit -> update)

* fixes authorization checking wrong permission in API

The authorization was checking for the non-existent „edit“ method where it should have checked for the „update“ method.

* adds authorization checks for select2 lists

* adds missing authorization checks for api

* fixes user authorization check for creating users

* adds additional check viewing assets on showing a users assets

* Removes authorization checks for select2 lists

Reference: https://github.com/snipe/snipe-it/pull/5807#pullrequestreview-136018755
2018-07-12 18:28:02 -07:00
..
Controllers Fixing authorization issues (#5807) 2018-07-12 18:28:02 -07:00
Middleware Disable broken tests (#5073) 2018-02-22 21:46:58 -08:00
Requests Feature: PostgreSQL support (#5642) 2018-07-12 18:24:43 -07:00
Traits Fix tests 2018-07-09 21:57:45 -07:00
Transformers Disallow deleting category if there are licenses 2018-07-05 18:02:25 -07:00
Kernel.php fix middleware priority: handle trusted proxies prior setup check 2018-07-05 15:36:59 -07:00