kenmirrors/grocy
1
0
Fork 0
mirror of https://github.com/grocy/grocy.git synced 2025-08-28 09:01:14 +00:00
Code Issues Projects Releases Wiki Activity

Fixed granular user permission checking in GenericEntityApiController (fixes #2025)

Browse Source
This commit is contained in:
Bernd Bestel
2022-10-17 21:00:10 +02:00
parent 80a873da3e
commit 3070448555
3 changed files with 64 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
controllers/Users/User.php
View File

@@ -83,16 +83,12 @@ class User
return $user->getPermissionList();
}
public static function checkPermission($request, string ...$permissions): void
public static function checkPermission($request, string $permission): void
{
$user = new self();
foreach ($permissions as $permission)
if (!$user->hasPermission($permission))
{
if (!$user->hasPermission($permission))
{
throw new PermissionMissingException($request, $permission);
}
throw new PermissionMissingException($request, $permission);
}
}