team members and invitations
This commit is contained in:
@@ -12,7 +12,7 @@ class IssueController extends Controller
|
||||
{
|
||||
public function index(Request $request, Project $project): View
|
||||
{
|
||||
$this->authorizeProject($request, $project);
|
||||
$this->authorize('view', $project);
|
||||
|
||||
$query = $project->issues();
|
||||
|
||||
@@ -69,7 +69,7 @@ class IssueController extends Controller
|
||||
|
||||
public function show(Request $request, Project $project, Issue $issue): View
|
||||
{
|
||||
$this->authorizeProject($request, $project);
|
||||
$this->authorize('view', $project);
|
||||
abort_unless($issue->project_id === $project->id, 404);
|
||||
|
||||
$environment = $request->query('environment');
|
||||
@@ -107,7 +107,7 @@ class IssueController extends Controller
|
||||
|
||||
public function updateStatus(Request $request, Project $project, Issue $issue): RedirectResponse
|
||||
{
|
||||
$this->authorizeProject($request, $project);
|
||||
$this->authorize('view', $project);
|
||||
abort_unless($issue->project_id === $project->id, 404);
|
||||
|
||||
$action = $request->input('action');
|
||||
@@ -125,7 +125,7 @@ class IssueController extends Controller
|
||||
|
||||
public function bulkAction(Request $request, Project $project): RedirectResponse
|
||||
{
|
||||
$this->authorizeProject($request, $project);
|
||||
$this->authorize('view', $project);
|
||||
|
||||
$validated = $request->validate([
|
||||
'action' => 'required|in:resolve,ignore,mute,delete',
|
||||
@@ -147,12 +147,4 @@ class IssueController extends Controller
|
||||
|
||||
return back()->with('status', "{$count} issue(s) {$validated['action']}d.");
|
||||
}
|
||||
|
||||
private function authorizeProject(Request $request, Project $project): void
|
||||
{
|
||||
abort_unless(
|
||||
$request->user()->projects()->where('projects.id', $project->id)->exists(),
|
||||
403,
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user