From 004aa116fb58953489caa53e07f6dfb97ea0e1c9 Mon Sep 17 00:00:00 2001
From: James Collins <james.collins@outlook.com.au>
Date: Fri, 29 Sep 2023 12:22:48 +1000
Subject: [PATCH] allow security_data in the correct contexts

---
 app/Conductors/MediaConductor.php | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/app/Conductors/MediaConductor.php b/app/Conductors/MediaConductor.php
index 7c1e8c7..def1340 100644
--- a/app/Conductors/MediaConductor.php
+++ b/app/Conductors/MediaConductor.php
@@ -51,9 +51,8 @@ class MediaConductor extends Conductor
 
         /** @var \App\Models\User */
         $user = auth()->user();
-        $fields = arrayRemoveItem($fields, 'security_data');
         if ($user === null || $user->hasPermission('admin/media') === false) {
-            $fields = arrayRemoveItem($fields, 'storage');
+            $fields = arrayRemoveItem($fields, ['security_data', 'storage']);
         }
 
         return $fields;