allow security_data in the correct contexts

This commit is contained in:
2023-09-29 12:22:48 +10:00
parent 32a08e1e10
commit 004aa116fb

View File

@@ -51,9 +51,8 @@ class MediaConductor extends Conductor
/** @var \App\Models\User */
$user = auth()->user();
$fields = arrayRemoveItem($fields, 'security_data');
if ($user === null || $user->hasPermission('admin/media') === false) {
$fields = arrayRemoveItem($fields, 'storage');
$fields = arrayRemoveItem($fields, ['security_data', 'storage']);
}
return $fields;