Add role check

karlomikus · Oct 1, 2023 · 85c3cf5 · 85c3cf5
1 parent 83d9bc8
commit 85c3cf5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Http/Controllers/UsersController.php b/app/Http/Controllers/UsersController.php
@@ -81,7 +81,7 @@ public function update(int $id, UserRequest $request): JsonResource
 
         $user->name = $request->post('name');
 
-        if ($request->has('role_id')) {
+        if ($request->has('role_id') && $user->isBarAdmin(bar()->id)) {
             $barMembership = $user->getBarMembership(bar()->id);
             $barMembership->user_role_id = $request->post('role_id');
             $barMembership->save();