FEATURE #2048: another work done on permissions
This commit is contained in:
@@ -21,9 +21,9 @@ class ContentPolicy extends BasicPolicy
|
||||
*/
|
||||
public function update(User $user, Content $content)
|
||||
{
|
||||
if (!$user->hasAbility('update-contents-' . $content->module->alias)) {
|
||||
return false;
|
||||
}
|
||||
// if (!$user->hasAbility('update-contents-' . $content->module->alias)) {
|
||||
// return false;
|
||||
// }
|
||||
|
||||
if ($user->id != $content->user_id) {
|
||||
return $user->hasAbility('update-contents') && $user->hasAbility('update-all-contents');
|
||||
|
||||
@@ -19,7 +19,7 @@ class FilesPolicy extends BasicPolicy
|
||||
*
|
||||
* @return mixed
|
||||
*/
|
||||
public function create(User $user, File $file)
|
||||
public function upload(User $user)
|
||||
{
|
||||
return $user->hasAbility('upload-files');
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user