From 6c6d138837f2bdd450430eb8d85084ecf3f5a150 Mon Sep 17 00:00:00 2001 From: Chinedu Okemiri Date: Tue, 19 Apr 2022 20:04:05 +0100 Subject: [PATCH] Fixed Improper Access Control on view Student List --- routes/web.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/routes/web.php b/routes/web.php index 3e3a027..b86c6d4 100644 --- a/routes/web.php +++ b/routes/web.php @@ -27,7 +27,7 @@ Route::get('reset_pass/{st_id}', 'StudentRecordController@reset_pass')->name('st.reset_pass'); Route::get('graduated', 'StudentRecordController@graduated')->name('students.graduated'); Route::put('not_graduated/{id}', 'StudentRecordController@not_graduated')->name('st.not_graduated'); - Route::get('list/{class_id}', 'StudentRecordController@listByClass')->name('students.list'); + Route::get('list/{class_id}', 'StudentRecordController@listByClass')->name('students.list')->middleware('teamSAT'); /* Promotions */ Route::post('promote_selector', 'PromotionController@selector')->name('students.promote_selector');