team members and invitations

This commit is contained in:
Doar Mihai
2026-03-21 16:13:38 +02:00
parent 756747cd00
commit add7169de3
15 changed files with 666 additions and 31 deletions
+4 -12
View File
@@ -12,7 +12,7 @@ class IssueController extends Controller
{
public function index(Request $request, Project $project): View
{
$this->authorizeProject($request, $project);
$this->authorize('view', $project);
$query = $project->issues();
@@ -69,7 +69,7 @@ class IssueController extends Controller
public function show(Request $request, Project $project, Issue $issue): View
{
$this->authorizeProject($request, $project);
$this->authorize('view', $project);
abort_unless($issue->project_id === $project->id, 404);
$environment = $request->query('environment');
@@ -107,7 +107,7 @@ class IssueController extends Controller
public function updateStatus(Request $request, Project $project, Issue $issue): RedirectResponse
{
$this->authorizeProject($request, $project);
$this->authorize('view', $project);
abort_unless($issue->project_id === $project->id, 404);
$action = $request->input('action');
@@ -125,7 +125,7 @@ class IssueController extends Controller
public function bulkAction(Request $request, Project $project): RedirectResponse
{
$this->authorizeProject($request, $project);
$this->authorize('view', $project);
$validated = $request->validate([
'action' => 'required|in:resolve,ignore,mute,delete',
@@ -147,12 +147,4 @@ class IssueController extends Controller
return back()->with('status', "{$count} issue(s) {$validated['action']}d.");
}
private function authorizeProject(Request $request, Project $project): void
{
abort_unless(
$request->user()->projects()->where('projects.id', $project->id)->exists(),
403,
);
}
}