[2.x] Fix permissions for team create routes (#669)

* Fix permissions for team create routes * Update TeamController.php * Update TeamController.php * Update TeamController.php Co-authored-by: Taylor Otwell <taylor@laravel.com>
laravel · Feb 9, 2021 · 355262d · 355262d
1 parent 15e8b37
commit 355262d
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 3 deletions.
diff --git a/src/Http/Controllers/Inertia/TeamController.php b/src/Http/Controllers/Inertia/TeamController.php
@@ -28,9 +28,7 @@ public function show(Request $request, $teamId)
     {
         $team = Jetstream::newTeamModel()->findOrFail($teamId);
 
-        if (Gate::denies('view', $team)) {
-            abort(403);
-        }
+        Gate::authorize('view', $team);
 
         return Jetstream::inertia()->render($request, 'Teams/Show', [
             'team' => $team->load('owner', 'users', 'teamInvitations'),
@@ -54,6 +52,8 @@ public function show(Request $request, $teamId)
      */
     public function create(Request $request)
     {
+        Gate::authorize('create', Jetstream::newTeamModel());
+
         return Inertia::render('Teams/Create');
     }
 

diff --git a/src/Http/Controllers/Livewire/TeamController.php b/src/Http/Controllers/Livewire/TeamController.php
@@ -38,6 +38,8 @@ public function show(Request $request, $teamId)
      */
     public function create(Request $request)
     {
+        Gate::authorize('create', Jetstream::newTeamModel());
+
         return view('teams.create', [
             'user' => $request->user(),
         ]);