Merge pull request #480 from Neriderc/fix-auth

Fix auth issue
Neriderc · Apr 12, 2024 · 31dbb1e · 31dbb1e
2 parents 2e10127 + 7d13304
commit 31dbb1e
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/module.php b/module.php
@@ -174,6 +174,8 @@ public function getIndividual($tree, $xref): Individual
     public function getChartAction(ServerRequestInterface $request): ResponseInterface
     {
         $tree = $request->getAttribute('tree');
+        Auth::checkComponentAccess($this, ModuleChartInterface::class, $tree, Auth::user());
+
         assert($tree instanceof Tree);
         if (isset($request->getQueryParams()['xref'])) {
             $xref = $request->getQueryParams()['xref'];