Fixed Improper Access Control on view Student List

4jean · Apr 19, 2022 · 6c6d138 · 6c6d138
1 parent 649b708
commit 6c6d138
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/routes/web.php b/routes/web.php
@@ -27,7 +27,7 @@
             Route::get('reset_pass/{st_id}', 'StudentRecordController@reset_pass')->name('st.reset_pass');
             Route::get('graduated', 'StudentRecordController@graduated')->name('students.graduated');
             Route::put('not_graduated/{id}', 'StudentRecordController@not_graduated')->name('st.not_graduated');
-            Route::get('list/{class_id}', 'StudentRecordController@listByClass')->name('students.list');
+            Route::get('list/{class_id}', 'StudentRecordController@listByClass')->name('students.list')->middleware('teamSAT');
 
             /* Promotions */
             Route::post('promote_selector', 'PromotionController@selector')->name('students.promote_selector');