no-agenda-producers/podcastartgenerator
no-agenda-producers/podcastartgenerator
Template
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 3 Wiki Activity

fix: prevents self approval

Browse Source
This commit is contained in:
Paul Couture 2024-01-14 11:19:59 -06:00
parent b14a77762d
commit e83f51885b
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
site/app/Http/Controllers/ArtworkController.php
View File

@ -90,6 +90,9 @@ public function approve(Request $request)
'artwork_id' => 'required|exists:artworks,id'
]);
$artwork = Artwork::find($request->artwork_id);
if ($artwork->artist_id == $user->artists->first()->id) {
return redirect('/approve-artwork');
}
if (is_null($artwork->approved_by)) {
$artwork->approved_by = $user->artists->first()->id;
$artwork->save();

4
site/resources/views/artworks/approvals.blade.php
View File

@ -68,11 +68,15 @@ class="avatar" data-bs-toggle="tooltip"
</div>
{{-- End .product-owner --}}
<div class="action-wrapper py-5 d-flex align-items-center justify-content-center">
@if (auth()->user()->artists->first()->id != $thisArtwork->artist_id)
<form action="/approve-artworks" method="POST" class="approve-artwork-form" name="approve-artwork-{{ $thisArtwork->id}}" enctype="multipart/form-data">
@csrf
<input name="artwork_id" type="hidden" value="{{ $thisArtwork->id }}">
<button type="submit" class="btn btn-gradient btn-medium justify-content-center"><span>Approve and Publish</span></button>
</form>
@else
<p>You cannot approve your own</p>
@endif
</div>
</div>
</div>