Check permission through the gate rather than directly on the actor

This commit is contained in:
Toby Zerner 2016-01-16 13:57:05 +10:30
parent dfc0cf53b0
commit be013c6db0

View File

@ -69,7 +69,7 @@ class DiscussionPolicy extends AbstractPolicy
*/
public function find(User $actor, Builder $query)
{
if (! $actor->hasPermission('viewDiscussions')) {
if ($actor->cannot('viewDiscussions')) {
$query->whereRaw('FALSE');
} elseif (! $actor->hasPermission('discussion.hide')) {
$query->where(function ($query) use ($actor) {