From 883feb5b69560de71fe8c21b3ae4721faac45288 Mon Sep 17 00:00:00 2001 From: Toby Zerner Date: Sat, 16 Jan 2016 13:57:05 +1030 Subject: [PATCH] Check permission through the gate rather than directly on the actor --- framework/core/src/Core/Access/DiscussionPolicy.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/framework/core/src/Core/Access/DiscussionPolicy.php b/framework/core/src/Core/Access/DiscussionPolicy.php index ac257496c..3781f213f 100644 --- a/framework/core/src/Core/Access/DiscussionPolicy.php +++ b/framework/core/src/Core/Access/DiscussionPolicy.php @@ -69,7 +69,7 @@ class DiscussionPolicy extends AbstractPolicy */ public function find(User $actor, Builder $query) { - if (! $actor->hasPermission('viewDiscussions')) { + if ($actor->cannot('viewDiscussions')) { $query->whereRaw('FALSE'); } elseif (! $actor->hasPermission('discussion.hide')) { $query->where(function ($query) use ($actor) {