Fix plugin authorization by registered route

ttimot24 · Nov 2, 2023 · 1251405 · 1251405
1 parent 95217eb
commit 1251405
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/app/Providers/AuthServiceProvider.php b/app/Providers/AuthServiceProvider.php
@@ -42,7 +42,10 @@ public function boot()
                 }
 
 
-                if(!in_array(str_replace("-","",$this->app->request->is($prefix.'/plugin/run/*')? $this->app->request->segment(4) : $this->app->request->segment(2)),$user->role->rights)){
+                if(
+                    !in_array(str_replace("-","",$this->app->request->is($prefix.'/plugin/run/*')? $this->app->request->segment(4) : $this->app->request->segment(2)),$user->role->rights) &&
+                    !in_array(str_replace("-","",$this->app->request->is($prefix.'/plugin/*')? $this->app->request->segment(3) : $this->app->request->segment(1)),$user->role->rights)
+                ){
                     return false;
                 }