AttachmentController checkPermission issue

Open Lucisu opened this issue 1 year ago • 0 comments

Describe the bug Hello! While checking the code of the AuthenticationController class, I noticed that the checkPermission call does not actually aborts if the user is unauthenticated:

https://github.com/orchidsoftware/platform/blob/da3f6f479a50ed40820b7b1547d35c8a537e7b0b/src/Platform/Http/Controllers/Controller.php#L29

It is later aborted in a different middleware, but I guess it would also make more sense to add this check in the AttachmentController too, right?

Jul 18 '24 20:07 Lucisu