search

orchidsoftware / crud

Simplify the process of building CRUD (Create, Read, Update, Delete) functionality in Laravel using the features of Orchid.
https://orchid.software
MIT License
138 stars 34 forks source link

Users can see Create Button without permission #26

Closed fozbek closed 3 years ago

fozbek commented 3 years ago

I can see Create button in resource without create permission

tabuna commented 3 years ago

I confirm, there is a problem

tabuna commented 3 years ago

This should already be fixed

bilogic commented 3 years ago

I just want to add that a Laravel Policy is required to hide the button, not the Orchid permissions. See https://laravel.com/docs/8.x/authorization#registering-policies and auto discovery.