lunax/snipe_it
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity Actions

Update BulkAssetModelsController.php

Browse source 
https://huntr.dev/bounties/efdf2ead-f9d1-4767-9f02-d11f762d15e7
This commit is contained in:
Haxatron 2022-01-06 09:50:11 +08:00 • committed by GitHub
parent b78e610ce3
commit bb095641c2
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
app/Http/Controllers/BulkAssetModelsController.php
View file

@ -32,6 +32,7 @@ class BulkAssetModelsController extends Controller
// If deleting.... // If deleting....
if ($request->input('bulk_actions')=='delete') { if ($request->input('bulk_actions')=='delete') {
$this->authorize('delete', AssetModel::class);
$valid_count = 0; $valid_count = 0;
foreach ($models as $model) { foreach ($models as $model) {
if ($model->assets_count == 0) { if ($model->assets_count == 0) {
@ -42,7 +43,7 @@ class BulkAssetModelsController extends Controller
// Otherwise display the bulk edit screen // Otherwise display the bulk edit screen
} }
$this->authorize('update', AssetModel::class);
$nochange = ['NC' => 'No Change']; $nochange = ['NC' => 'No Change'];
return view('models/bulk-edit', compact('models')) return view('models/bulk-edit', compact('models'))
->with('fieldset_list', $nochange + Helper::customFieldsetList()) ->with('fieldset_list', $nochange + Helper::customFieldsetList())
@ -63,7 +64,8 @@ class BulkAssetModelsController extends Controller
*/ */
public function update(Request $request) public function update(Request $request)
{ {
$this->authorize('update', AssetModel::class);
$models_raw_array = $request->input('ids'); $models_raw_array = $request->input('ids');
$update_array = array(); $update_array = array();
@ -103,6 +105,8 @@ class BulkAssetModelsController extends Controller
*/ */
public function destroy(Request $request) public function destroy(Request $request)
{ {
$this->authorize('delete', AssetModel::class);
$models_raw_array = $request->input('ids'); $models_raw_array = $request->input('ids');
if ((is_array($models_raw_array)) && (count($models_raw_array) > 0)) { if ((is_array($models_raw_array)) && (count($models_raw_array) > 0)) {