fix: members of root team should not see instance admin stuff

2024-07-26 14:54:24 +02:00
parent 95548b9d9b
commit 281c6e39a5
1 changed files with 4 additions and 0 deletions
--- a/app/Models/User.php
+++ b/app/Models/User.php
@@ -180,6 +180,10 @@ class User extends Authenticatable implements SendsEmail
    {
        $found_root_team = auth()->user()->teams->filter(function ($team) {
            if ($team->id == 0) {
+                if (! auth()->user()->isAdmin()) {
+                    return false;
+                }
+
                return true;
            }