Added access gate to the requested assets index

Signed-off-by: snipe <snipe@snipe.net>
snipe · Apr 28, 2022 · 2e9cf8f · 2e9cf8f
1 parent 126bb48
commit 2e9cf8f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/app/Http/Controllers/Assets/AssetsController.php b/app/Http/Controllers/Assets/AssetsController.php
@@ -861,6 +861,7 @@ public function auditStore(Request $request, $id)
 
     public function getRequestedIndex($user_id = null)
     {
+        $this->authorize('index', Asset::class);
         $requestedItems = CheckoutRequest::with('user', 'requestedItem')->whereNull('canceled_at')->with('user', 'requestedItem');
 
         if ($user_id) {