mirror of
https://github.com/brufdev/many-notes.git
synced 2026-05-20 00:58:50 -05:00
Fix collaboration permissions
This commit is contained in:
@@ -19,6 +19,9 @@ final readonly class VaultNodePolicy
|
||||
$vault = $node->vault;
|
||||
|
||||
return $user->id === $vault->created_by ||
|
||||
$vault->collaborators()->where('user_id', $user->id)->exists();
|
||||
$vault->collaborators()
|
||||
->where('user_id', $user->id)
|
||||
->where('accepted', true)
|
||||
->exists();
|
||||
}
|
||||
}
|
||||
|
||||
@@ -15,7 +15,10 @@ final readonly class VaultPolicy
|
||||
public function view(User $user, Vault $vault): bool
|
||||
{
|
||||
return $user->id === $vault->created_by ||
|
||||
$vault->collaborators()->where('user_id', $user->id)->exists();
|
||||
$vault->collaborators()
|
||||
->where('user_id', $user->id)
|
||||
->where('accepted', true)
|
||||
->exists();
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -24,7 +27,10 @@ final readonly class VaultPolicy
|
||||
public function update(User $user, Vault $vault): bool
|
||||
{
|
||||
return $user->id === $vault->created_by ||
|
||||
$vault->collaborators()->where('user_id', $user->id)->exists();
|
||||
$vault->collaborators()
|
||||
->where('user_id', $user->id)
|
||||
->where('accepted', true)
|
||||
->exists();
|
||||
}
|
||||
|
||||
/**
|
||||
|
||||
Reference in New Issue
Block a user