bao/portal-api
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(service): chỉ trả mật khẩu hosting cho admin có quyền hosting.view

Browse Source 
GET administrator/services/{id} chỉ yêu cầu customer.view nhưng trả kèm mật khẩu
Plesk dạng rõ; giờ chỉ đính kèm khi là Full Administrator hoặc có hosting.view.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
baodev0
2026-10-28 16:43:43 +07:00
co-authored by Claude Sonnet 5.5
parent b44a88bb52
commit e37106f2dc
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Http/Controllers/Api/Admin/Service/ServiceController.php
+4 -1
View File
@@ -94,7 +94,10 @@ class ServiceController extends Controller
->findOrFail($id);
ModuleVmware::resolveVirtualMachineIds([$service->vmware]);
\App\Support\HostingCredentials::attach([$service]);
$admin = auth()->guard('admin')->user();
if ($admin?->hasRole('Full Administrator') || $admin?->hasPermissionTo('hosting.view')) {
\App\Support\HostingCredentials::attach([$service]);
}
$invoices = $this->linkedInvoices(collect([$service]));
$payments = InvoicePaymentHistory::forInvoices($invoices);