Fix settings access (#11915)

normal users could access
This commit is contained in:
Tony Murray 2020-07-08 18:04:48 -05:00 committed by GitHub
parent a30fcbde0a
commit e5bb6d80bc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -43,7 +43,7 @@ Route::group(['middleware' => ['auth'], 'guard' => 'auth'], function () {
});
// admin pages
Route::group(['guard' => 'admin'], function () {
Route::group(['middleware' => ['can:admin']], function () {
Route::get('settings/{tab?}/{section?}', 'SettingsController@index')->name('settings');
Route::put('settings/{name}', 'SettingsController@update')->name('settings.update');
Route::delete('settings/{name}', 'SettingsController@destroy')->name('settings.destroy');