From bce98c0d4bc55a727b335665dcd69139d6e6c4be Mon Sep 17 00:00:00 2001 From: Joel Wedemire Date: Thu, 9 Apr 2026 14:32:19 -0700 Subject: [PATCH] fix(ticketing): restrict settings link to admins and protect global priorities - Show 'Go to Settings' bootstrap link only for admin/super_admin users - Pass isSiteAdmin prop to Create.vue to control settings CTA visibility - Require site admin for updatePriority/destroyPriority when priority is global (group_id = null) - Closes: non-admin users seeing forbidden settings link; agents mutating global priorities --- resources/js/Pages/Ticketing/Create.vue | 180 ++++---- resources/js/Pages/Ticketing/Edit.vue | 167 ++++---- resources/js/Pages/Ticketing/MyTickets.vue | 77 ++-- resources/js/Pages/Ticketing/Settings.vue | 134 +++--- resources/js/Pages/Ticketing/Show.vue | 396 +++++++++--------- src/Http/Controllers/TicketController.php | 2 + .../TicketingSettingsController.php | 10 + 7 files changed, 493 insertions(+), 473 deletions(-) diff --git a/resources/js/Pages/Ticketing/Create.vue b/resources/js/Pages/Ticketing/Create.vue index 5e5638b..0d15a14 100644 --- a/resources/js/Pages/Ticketing/Create.vue +++ b/resources/js/Pages/Ticketing/Create.vue @@ -1,103 +1,107 @@