Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prevent filtered records being updateable #4852

Merged
merged 1 commit into from
Apr 2, 2020
Merged

Prevent filtered records being updateable #4852

merged 1 commit into from
Apr 2, 2020

Conversation

emptynick
Copy link
Collaborator

A record that can not be seen when browsing/editing/reading because of a scope filtering it out can be updated when the ID in the request is manipulated.

This PR fixes this.

@codecov
Copy link

codecov bot commented Apr 1, 2020

Codecov Report

Merging #4852 into 1.4 will not change coverage by %.
The diff coverage is 100.00%.

Impacted file tree graph

@@            Coverage Diff            @@
##                1.4    #4852   +/-   ##
=========================================
  Coverage     60.37%   60.37%           
  Complexity     1370     1370           
=========================================
  Files           194      194           
  Lines          3990     3990           
=========================================
  Hits           2409     2409           
  Misses         1581     1581           
Impacted Files Coverage Δ Complexity Δ
src/Http/Controllers/VoyagerBaseController.php 58.52% <100.00%> (ø) 136.00 <0.00> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 4756930...7ff5645. Read the comment docs.

@emptynick emptynick merged commit cfee641 into thedevdojo:1.4 Apr 2, 2020
@emptynick emptynick deleted the fix-scopes branch April 2, 2020 10:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants