FIX: fix some security issue
This commit is contained in:
@@ -14,7 +14,8 @@ class CreateNewUser extends Request
|
||||
*/
|
||||
public function authorize()
|
||||
{
|
||||
return \Auth::$user->role == User::ROLE_ADMIN;
|
||||
|
||||
return \Auth::check() && \Auth::$user->role == User::ROLE_ADMIN;
|
||||
}
|
||||
|
||||
/**
|
||||
|
||||
Reference in New Issue
Block a user