Added access gate to the requested assets index

Signed-off-by: snipe <snipe@snipe.net>
2022-04-28 15:45:37 +01:00
parent 126bb486b5
commit 2e9cf8fa87
1 changed files with 1 additions and 0 deletions
@@ -861,6 +861,7 @@ class AssetsController extends Controller

    public function getRequestedIndex($user_id = null)
    {
+        $this->authorize('index', Asset::class);
        $requestedItems = CheckoutRequest::with('user', 'requestedItem')->whereNull('canceled_at')->with('user', 'requestedItem');

        if ($user_id) {