Merge pull request #2307 from marekdedic/education-event-authorizatio…

…n-fix Fixed Education presenter checking general event update permission instead of Education event update permission
skaut · Oct 4, 2023 · e69180d · e69180d
2 parents c533daf + d41a0ea
commit e69180d
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/app/AccountancyModule/EducationModule/presenters/BasePresenter.php b/app/AccountancyModule/EducationModule/presenters/BasePresenter.php
@@ -4,7 +4,7 @@
 
 namespace App\AccountancyModule\EducationModule;
 
-use Model\Auth\Resources\Event as ResourceEvent;
+use Model\Auth\Resources\Education as ResourceEducation;
 use Model\Cashbook\ObjectType;
 use Model\Event\Education;
 use Model\Event\Exception\EducationNotFound;
@@ -41,7 +41,7 @@ protected function startup(): void
 
         $this->template->setParameters([
             'event' => $this->event,
-            'isEditable' => $this->isEditable = $this->authorizator->isAllowed(ResourceEvent::UPDATE, $this->aid),
+            'isEditable' => $this->isEditable = $this->authorizator->isAllowed(ResourceEducation::UPDATE, $this->aid),
         ]);
     }
 

diff --git a/app/model/Auth/Resources/Education.php b/app/model/Auth/Resources/Education.php
@@ -17,5 +17,7 @@ final class Education
     public const ACCESS_PARTICIPANTS = [self::class, 'EV_ParticipantEducation_ALL_EventEducation'];
     public const UPDATE_PARTICIPANT  = [self::class, 'EV_ParticipantEducation_UPDATE_EventEducation'];
 
+    public const UPDATE = [self::class, 'EV_EventEducation_UPDATE'];
+
     public const UPDATE_REAL_BUDGET_SPENDING = [self::class, 'GR_Statement_UPDATE_EventEducationReal'];
 }