Don’t let the user checkout an asset to itself

(We should consolidate that AssetCheckoutRequest for the API)
2017-10-19 15:51:55 -07:00
parent 2fc46746e2
commit 1f247ff541
4 changed files with 21 additions and 6 deletions
@@ -458,7 +458,7 @@ class AssetsController extends Controller
        if (request('assigned_user')) {
            $target = User::find(request('assigned_user'));
        } elseif (request('assigned_asset')) {
-            $target = Asset::find(request('assigned_asset'));
+            $target = Asset::where('id','!=',$assetId)->find(request('assigned_asset'));
        } elseif (request('assigned_location')) {
            $target = Location::find(request('assigned_location'));
        }