Merge pull request #1946 from iljalukin/renderable-auth

Check authorization in RenderableController
jqhph · Nov 19, 2022 · 9565079 · 9565079
2 parents 482f90d + b402cf0
commit 9565079
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/Http/Controllers/RenderableController.php b/src/Http/Controllers/RenderableController.php
@@ -15,6 +15,10 @@ public function handle(Request $request)
 
         $renderable = $this->newRenderable($request);
 
+        if (method_exists($renderable, 'passesAuthorization') && ! $renderable->passesAuthorization()) {
+            return $renderable->failedAuthorization();
+        }
+
         $this->addScript();
 
         $this->forgetDefaultAssets();