From 6a41476187856fd69816b0333f4618e5cff4753d Mon Sep 17 00:00:00 2001 From: Jesus Guerrero Date: Sat, 5 Aug 2023 17:48:16 -0400 Subject: [PATCH] fix: allow users delete transactions of the team --- src/Http/Controllers/TransactionController.php | 10 ++++------ 1 file changed, 4 insertions(+), 6 deletions(-) diff --git a/src/Http/Controllers/TransactionController.php b/src/Http/Controllers/TransactionController.php index b33a906..2d1bf34 100644 --- a/src/Http/Controllers/TransactionController.php +++ b/src/Http/Controllers/TransactionController.php @@ -11,7 +11,7 @@ use Laravel\Jetstream\Jetstream; -class TransactionController +final class TransactionController { public function __construct() @@ -77,13 +77,11 @@ public function update(Request $request, Response $response, $id) { } public function destroy(Request $request, Response $response, $id) { - $postData = $request->post(); - $postData['user_id'] = $request->user()->id; - $postData['team_id'] = $request->user()->current_team_id; $transaction = Transaction::where([ - 'user_id'=> $request->user()->id, + 'team_id'=> $request->user()->current_team_id, 'id' => $id - ])->first(); + ]) + ->first(); $transaction->remove(); if ($request->query('json')) { return $response->sendContent($transaction);