mirror/php-flarum
1
0
Fork 0
mirror of https://github.com/flarum/core.git synced 2025-07-21 08:41:17 +02:00
Code Issues Releases Wiki Activity

Assert permission when updating avatar

Browse Source
This commit is contained in:
Clark Winkelmann
2018-01-31 16:36:42 +01:00
parent c4b8875be2
commit 8835aee224
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
framework/core/src/User/Command/EditUserHandler.php
View File

@@ -147,6 +147,8 @@ class EditUserHandler
} }
if ($avatarUrl = array_get($attributes, 'avatarUrl')) { if ($avatarUrl = array_get($attributes, 'avatarUrl')) {
$this->assertPermission($canEdit);
$validation = $this->validatorFactory->make(compact('avatarUrl'), ['avatarUrl' => 'url']); $validation = $this->validatorFactory->make(compact('avatarUrl'), ['avatarUrl' => 'url']);
if ($validation->fails()) { if ($validation->fails()) {
@@ -161,6 +163,8 @@ class EditUserHandler
// //
} }
} elseif (array_key_exists('avatarUrl', $attributes)) { } elseif (array_key_exists('avatarUrl', $attributes)) {
$this->assertPermission($canEdit);
$this->avatarUploader->remove($user); $this->avatarUploader->remove($user);
} }