Merge pull request #10504 from snipe/fixes/auth_controls_on_api_key_c…

…reation Fixes auth controls on api key creation
snipe · Jan 13, 2022 · 0e5ef53 · 0e5ef53
2 parents eb8f23a + 512dbfe
commit 0e5ef53
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/app/Http/Controllers/ProfileController.php b/app/Http/Controllers/ProfileController.php
@@ -113,6 +113,12 @@ public function postIndex(ImageUploadRequest $request)
      */
     public function api()
     {
+
+        // Make sure the self.api permission has been granted
+        if (!Gate::allows('self.api')) {
+            abort(403);
+        }
+
         return view('account/api');
     }