mirror of
https://github.com/tiennm99/coolify.git
synced 2026-10-03 05:19:37 +00:00
fix: improve team resource route handling
This commit is contained in:
1 parent
e7dff30b7c
commit
fb2d477e48
5 files changed
+480
-50
No files matched your search
@@ -37,12 +37,11 @@ class TeamPolicy
|
||||
*/
|
||||
public function update(User $user, Team $team): bool
|
||||
{
|
||||
// Only admins and owners can update team settings
|
||||
if (! $user->teams->contains('id', $team->id)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
return $user->isAdmin() || $user->isOwner();
|
||||
return $user->isAdminOfTeam($team->id);
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -50,12 +49,11 @@ class TeamPolicy
|
||||
*/
|
||||
public function delete(User $user, Team $team): bool
|
||||
{
|
||||
// Only admins and owners can delete teams
|
||||
if (! $user->teams->contains('id', $team->id)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
return $user->isAdmin() || $user->isOwner();
|
||||
return $user->isAdminOfTeam($team->id);
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -63,12 +61,11 @@ class TeamPolicy
|
||||
*/
|
||||
public function manageMembers(User $user, Team $team): bool
|
||||
{
|
||||
// Only admins and owners can manage team members
|
||||
if (! $user->teams->contains('id', $team->id)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
return $user->isAdmin() || $user->isOwner();
|
||||
return $user->isAdminOfTeam($team->id);
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -76,12 +73,11 @@ class TeamPolicy
|
||||
*/
|
||||
public function viewAdmin(User $user, Team $team): bool
|
||||
{
|
||||
// Only admins and owners can view admin panel
|
||||
if (! $user->teams->contains('id', $team->id)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
return $user->isAdmin() || $user->isOwner();
|
||||
return $user->isAdminOfTeam($team->id);
|
||||
}
|
||||
|
||||
/**
|
||||
@@ -89,11 +85,10 @@ class TeamPolicy
|
||||
*/
|
||||
public function manageInvitations(User $user, Team $team): bool
|
||||
{
|
||||
// Only admins and owners can manage invitations
|
||||
if (! $user->teams->contains('id', $team->id)) {
|
||||
return false;
|
||||
}
|
||||
|
||||
return $user->isAdmin() || $user->isOwner();
|
||||
return $user->isAdminOfTeam($team->id);
|
||||
}
|
||||
}
|
||||
Reference in new issue
Block a user