Add role-based authorization for updating teams

2024-04-05 16:48:06 +02:00
parent c223408c3c
commit 36c31dcd67
2 changed files with 9 additions and 3 deletions
--- a/app/Models/Team.php
+++ b/app/Models/Team.php
@@ -21,9 +21,11 @@ class Team extends Model implements SendsDiscord, SendsEmail

    protected static function booted()
    {
-        // static::saved(function () {
-        //     refreshSession();
-        // });
+        static::saving(function ($team) {
+            if (auth()->user()->isMember()) {
+                throw new \Exception('You are not allowed to update this team.');
+            }
+        });
    }

    public function routeNotificationForDiscord()