Merge pull request #306 from HiEventsDev/develop

HiEventsDev · Dec 2, 2024 · 6f78bc8 · 6f78bc8
2 parents 014065d + 8744686
commit 6f78bc8
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/backend/app/Http/Actions/Orders/GetOrderAction.php b/backend/app/Http/Actions/Orders/GetOrderAction.php
@@ -3,6 +3,7 @@
 namespace HiEvents\Http\Actions\Orders;
 
 use HiEvents\DomainObjects\AttendeeDomainObject;
+use HiEvents\DomainObjects\EventDomainObject;
 use HiEvents\DomainObjects\OrderItemDomainObject;
 use HiEvents\DomainObjects\QuestionAndAnswerViewDomainObject;
 use HiEvents\Http\Actions\BaseAction;
@@ -21,6 +22,8 @@ public function __construct(OrderRepositoryInterface $orderRepository)
 
     public function __invoke(int $eventId, int $orderId): JsonResponse
     {
+        $this->isActionAuthorized($eventId, EventDomainObject::class);
+
         $order = $this->orderRepository
             ->loadRelation(OrderItemDomainObject::class)
             ->loadRelation(AttendeeDomainObject::class)