fix(service): chỉ trả mật khẩu hosting cho admin có quyền hosting.view
GET administrator/services/{id} chỉ yêu cầu customer.view nhưng trả kèm mật khẩu
Plesk dạng rõ; giờ chỉ đính kèm khi là Full Administrator hoặc có hosting.view.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Sonnet 5.5
parent
b44a88bb52
commit
e37106f2dc
@@ -94,7 +94,10 @@ class ServiceController extends Controller
|
||||
->findOrFail($id);
|
||||
|
||||
ModuleVmware::resolveVirtualMachineIds([$service->vmware]);
|
||||
\App\Support\HostingCredentials::attach([$service]);
|
||||
$admin = auth()->guard('admin')->user();
|
||||
if ($admin?->hasRole('Full Administrator') || $admin?->hasPermissionTo('hosting.view')) {
|
||||
\App\Support\HostingCredentials::attach([$service]);
|
||||
}
|
||||
|
||||
$invoices = $this->linkedInvoices(collect([$service]));
|
||||
$payments = InvoicePaymentHistory::forInvoices($invoices);
|
||||
|
||||
Reference in New Issue
Block a user