dave/coolify
1
0
Fork 0
Code Issues Pull Requests Actions 2 Packages Projects Releases Wiki Activity

fix(policy): update delete method to check for admin status in S3StoragePolicy

Browse Source
This commit is contained in:
Andras Bacsai
2025-07-23 17:57:05 +02:00
parent 158711a165
commit 103a9c2df2
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/Policies/S3StoragePolicy.php
View File

@@ -21,7 +21,7 @@ class S3StoragePolicy
*/ */
public function view(User $user, S3Storage $storage): bool public function view(User $user, S3Storage $storage): bool
{ {
return $user->teams()->where('id', $storage->team_id)->exists(); return $user->teams()->get()->firstWhere('id', $storage->team_id)->exists();
} }
/** /**
@@ -37,7 +37,7 @@ class S3StoragePolicy
*/ */
public function update(User $user, Server $server): bool public function update(User $user, Server $server): bool
{ {
return $user->teams()->get()->firstWhere('id', $server->team_id) !== null; return $user->teams()->get()->firstWhere('id', $server->team_id)->exists() && $user->isAdmin();
} }
/** /**
@@ -45,7 +45,7 @@ class S3StoragePolicy
*/ */
public function delete(User $user, S3Storage $storage): bool public function delete(User $user, S3Storage $storage): bool
{ {
return $user->teams()->where('id', $storage->team_id)->exists(); return $user->teams()->get()->firstWhere('id', $storage->team_id)->exists() && $user->isAdmin();
} }
/** /**