← All changes
|
Modules/Course/Http/Policies/CourseAdminPolicy.php
+3
-73
2.6.01
→
2.10.0
View file →
| @@ -25,9 +25,9 @@ | ||
| 25 | 25 | if (!$user->hasCourseCreatorAccess()) { |
| 26 | 26 | return false; |
| 27 | 27 | } |
| 28 | 28 | |
| 29 | - if ($request->get('course_id')) { | |
| 29 | + if ($this->getRouteParam($request, 'course_id')) { | |
| 30 | 30 | return $this->canManageCourse($request); |
| 31 | 31 | } |
| 32 | 32 | |
| 33 | 33 | return true; |
| @@ -32,87 +32,17 @@ | ||
| 32 | 32 | |
| 33 | 33 | return true; |
| 34 | 34 | } |
| 35 | 35 | |
| 36 | - public function findCourse(Request $request) | |
| 37 | - { | |
| 38 | - return $this->canManageCourse($request); | |
| 39 | - } | |
| 40 | - | |
| 41 | - public function updateCourse(Request $request) | |
| 42 | - { | |
| 43 | - return $this->canManageCourse($request); | |
| 44 | - } | |
| 45 | - | |
| 46 | - public function deleteCourse(Request $request) | |
| 47 | - { | |
| 48 | - return $this->canManageCourse($request); | |
| 49 | - } | |
| 50 | - | |
| 51 | - public function getOtherUsers(Request $request) | |
| 52 | - { | |
| 53 | - return $this->canManageCourse($request); | |
| 54 | - } | |
| 55 | - | |
| 56 | - public function addStudent(Request $request) | |
| 57 | - { | |
| 58 | - return $this->canManageCourse($request); | |
| 59 | - } | |
| 60 | - | |
| 61 | - public function removeStudent(Request $request) | |
| 62 | - { | |
| 63 | - return $this->canManageCourse($request); | |
| 64 | - } | |
| 65 | - | |
| 66 | - public function bulkAddStudents(Request $request) | |
| 67 | - { | |
| 68 | - return $this->canManageCourse($request); | |
| 69 | - } | |
| 70 | - | |
| 71 | - public function bulkImportStudents(Request $request) | |
| 72 | - { | |
| 73 | - return $this->canManageCourse($request); | |
| 74 | - } | |
| 75 | - | |
| 76 | - public function resolveCrmTagCourse(Request $request) | |
| 77 | - { | |
| 78 | - return $this->canManageCourse($request); | |
| 79 | - } | |
| 80 | - | |
| 81 | - public function updateLockscreenSettings(Request $request) | |
| 82 | - { | |
| 83 | - return $this->canManageCourse($request); | |
| 84 | - } | |
| 85 | - | |
| 86 | - public function updateLinks(Request $request) | |
| 87 | - { | |
| 88 | - return $this->canManageCourse($request); | |
| 89 | - } | |
| 90 | - | |
| 91 | - public function getCourseWelcomeBannerSettings(Request $request) | |
| 92 | - { | |
| 93 | - return $this->canManageCourse($request); | |
| 94 | - } | |
| 95 | - | |
| 96 | - public function updateCourseWelcomeBannerSettings(Request $request) | |
| 97 | - { | |
| 98 | - return $this->canManageCourse($request); | |
| 99 | - } | |
| 100 | - | |
| 101 | - public function duplicateLesson(Request $request) | |
| 102 | - { | |
| 103 | - return $this->canManageCourse($request); | |
| 104 | - } | |
| 105 | - | |
| 106 | 36 | protected function canManageCourse(Request $request) |
| 107 | 37 | { |
| 108 | - if (current_user_can('manage_options')) { | |
| 38 | + if (Helper::isSuperAdmin()) { | |
| 109 | 39 | return true; |
| 110 | 40 | } |
| 111 | 41 | |
| 112 | 42 | $user = Helper::getCurrentUser(true); |
| 113 | 43 | |
| 114 | - if ($courseId = $request->get('course_id')) { | |
| 44 | + if ($courseId = $this->getRouteParam($request, 'course_id')) { | |
| 115 | 45 | $course = Course::find($courseId); |
| 116 | 46 | if (!$course) { |
| 117 | 47 | return false; |
| 118 | 48 | } |