#1207 Module - canUpdate - check if user has manage permissions

Intermesh · Nov 22, 2024 · f48a12b · f48a12b
1 parent 7a3ebb8
commit f48a12b
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/www/go/core/controller/Module.php b/www/go/core/controller/Module.php
@@ -39,9 +39,18 @@ private function filterPermissions(Query $query) {
 		return $query;
 	}
 
+	/**
+	 * @param model\Module $entity
+	 * @return bool
+	 * @throws \Exception
+	 */
 	protected function canUpdate(Entity $entity): bool
 	{
-		return go()->getAuthState()->isAdmin();
+		if (go()->getAuthState()->isAdmin()) {
+			return true;
+		}
+
+		return $entity->getUserRights()->mayManage;
 	}
 
 	protected function canCreate(Entity $entity): bool