-
Notifications
You must be signed in to change notification settings - Fork 809
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Team's hasTeamPermission behaviour differs for Web and API users #62
Comments
Validated that hasTeamPermission is returning the correct value where the Team Permissions are overlapped in the API permissions and the Team permissions and is requested via a generated Sanctum API token. Any requests for the same user via inertia or livewire will return false for the same check. Web dd('Permissions:' . implode($user->teamPermissions($team)) . PHP_EOL . 'Can Create:' . ($user->hasTeamPermission($team, 'read') ? 'true' : 'false')); |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Description:
Attempting to inherit team permissions to enable users to perform actions on behalf of a team, however this is prevented due to $user->tokenCan taking precedence in HasTeams.php.
Where permissions are listed in $user->teamPermissions array, a request to $user->hasTeamPermission($teams, 'existingPermission') will always return false.
Steps To Reproduce:
The text was updated successfully, but these errors were encountered: