[fix] global role check for plugin modules

Leantime · Apr 23, 2024 · b33e7be · b33e7be
1 parent 9fade7a
commit b33e7be
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 1 deletion.
diff --git a/app/Domain/Plugins/Controllers/Details.php b/app/Domain/Plugins/Controllers/Details.php
@@ -3,6 +3,8 @@
 namespace Leantime\Domain\Plugins\Controllers;
 
 use Leantime\Core\Controller;
+use Leantime\Domain\Auth\Models\Roles;
+use Leantime\Domain\Auth\Services\Auth;
 use Leantime\Domain\Plugins\Services\Plugins as PluginService;
 use Symfony\Component\HttpFoundation\Response;
 
@@ -27,6 +29,9 @@ public function init(PluginService $pluginService): void
      */
     public function get(): Response
     {
+
+        Auth::authOrRedirect([Roles::$owner, Roles::$admin], true);
+
         if (! $this->incomingRequest->query->has('id')) {
             throw new \Exception('Plugin Identifier is required');
         }

diff --git a/app/Domain/Plugins/Controllers/Marketplace.php b/app/Domain/Plugins/Controllers/Marketplace.php
@@ -3,6 +3,8 @@
 namespace Leantime\Domain\Plugins\Controllers;
 
 use Leantime\Core\Controller;
+use Leantime\Domain\Auth\Models\Roles;
+use Leantime\Domain\Auth\Services\Auth;
 use Leantime\Domain\Plugins\Services\Plugins as PluginService;
 use Symfony\Component\HttpFoundation\Response;
 
@@ -27,6 +29,9 @@ public function init(
      */
     public function get(): Response
     {
+
+        Auth::authOrRedirect([Roles::$owner, Roles::$admin], true);
+
         $this->tpl->assign('plugins', []);
 
         return $this->tpl->display('plugins.marketplace');

diff --git a/app/Domain/Plugins/Controllers/Myapps.php b/app/Domain/Plugins/Controllers/Myapps.php
@@ -23,7 +23,7 @@ class Myapps extends Controller
          */
         public function init(PluginService $pluginService): void
         {
-            Auth::authOrRedirect([Roles::$owner, Roles::$admin]);
+            Auth::authOrRedirect([Roles::$owner, Roles::$admin], true);
             $this->pluginService = $pluginService;
         }