miguel456/rbrecruiter
1
0
Fork 1
Code Issues Pull Requests 1 Projects Releases 2 Wiki Activity

Add user directory & isolate authorisation

Browse Source
This commit is contained in:
Miguel Nogueira
2020-06-27 19:15:33 +01:00
parent 71efdf93d8
commit 33c16fcf46
25 changed files with 812 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
app/Http/Controllers/CommentController.php
View File

@@ -21,8 +21,8 @@ class CommentController extends Controller
public function insert(NewCommentRequest $request, Application $application)
{
// Type hinting makes laravel automatically validate everything
$this->authorize('create', Comment::class);
$comment = Comment::create([
'authorID' => Auth::user()->id,
'applicationID' => $application->id,
@@ -53,13 +53,10 @@ class CommentController extends Controller
public function delete(Request $request, Comment $comment)
{
if (Auth::user()->is($comment->user) || Auth::user()->hasRole('admin'))
{
$comment->delete();
$request->session()->flash('success', 'Comment deleted!');
}
$this->authorize('delete', $comment);
$request->session()->flash('error', 'You do not have permission to delete this comment!');
$comment->delete();
$request->session()->flash('success', 'Comment deleted!');
return redirect()->back();