Add authorization check in bulk users controller

2026-02-06 02:05:51 +00:00 · 2024-09-23 16:26:22 -07:00
parent ab90c0cf05
commit 4b02db5031
1 changed files with 2 additions and 0 deletions
--- a/app/Http/Controllers/Users/BulkUsersController.php
+++ b/app/Http/Controllers/Users/BulkUsersController.php
@ -99,6 +99,8 @@ class BulkUsersController extends Controller
                    ->withTrashed()
                    ->findMany($request->input('ids'));

+                $users->each(fn($user) => $this->authorize('view', $user));
+
                return view('users.print')
                    ->with('users', $users)
                    ->with('settings', Setting::getSettings());