From cc6ae43f4aa6b7d08fb8da1e6839143d40f240d4 Mon Sep 17 00:00:00 2001 From: David Bomba Date: Tue, 28 Feb 2023 22:17:32 +1100 Subject: [PATCH] Fixes for bank transaction permissions --- app/Http/Controllers/BankTransactionController.php | 2 +- .../Requests/BankTransaction/MatchBankTransactionRequest.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/app/Http/Controllers/BankTransactionController.php b/app/Http/Controllers/BankTransactionController.php index 1240da9eea..6c7839769e 100644 --- a/app/Http/Controllers/BankTransactionController.php +++ b/app/Http/Controllers/BankTransactionController.php @@ -83,7 +83,7 @@ class BankTransactionController extends BaseController * response="default", * description="Unexpected Error", * @OA\JsonContent(ref="#/components/schemas/Error"), - * ),zz + * ), * ) * @param BankTransactionFilters $filter * @return Response|mixed diff --git a/app/Http/Requests/BankTransaction/MatchBankTransactionRequest.php b/app/Http/Requests/BankTransaction/MatchBankTransactionRequest.php index 1f816b5c55..34c3280285 100644 --- a/app/Http/Requests/BankTransaction/MatchBankTransactionRequest.php +++ b/app/Http/Requests/BankTransaction/MatchBankTransactionRequest.php @@ -25,7 +25,7 @@ class MatchBankTransactionRequest extends Request */ public function authorize() : bool { - return auth()->user()->isAdmin() || auth()->user()->can('create', BankTransaction::class || auth()->user()->hasPermission('edit_bank_transaction')); + return auth()->user()->isAdmin() || auth()->user()->can('create', BankTransaction::class) || auth()->user()->hasPermission('edit_bank_transaction'); } public function rules()