Code cleanup and better auth check

2025-10-12 15:35:15 +00:00 · 2020-07-12 17:31:11 +02:00
parent e24c2491a6
commit 0c9a25a073
2 changed files with 1 additions and 3 deletions
--- a/app/Api/V1/Requests/DataDestroyRequest.php
+++ b/app/Api/V1/Requests/DataDestroyRequest.php
@@ -36,7 +36,7 @@ class DataDestroyRequest extends Request
    public function authorize(): bool
    {
        // Only allow authenticated users
-        return auth()->check();
+        return auth()->check() && !auth()->user()->hasRole('demo');
    }

    /**