Voyager: Settings menu item displayed when permission is not set

Created on 21 Sep 2017 · 4Comments · Source: the-control-group/voyager

Laravel Version: 5.5
Voyager Version: 1.0
PHP Version: 7.1
Database Driver & Version: MySQL 5.7.19

Description:

When deselect permission of "Settings" for a role and then you login with user with this role you see the Settings menu item. If you click you get the AccessDeniedHttpException: This action is unauthorized.

Steps To Reproduce:

With Admin Role go to Roles -> Edit User Role: Deselect all "Settings" options.
Logout and login with a user that have User Role.
Now you see the Settings Menu Item. If you click you get the AccessDeniedHttpException: This action is unauthorized.

bug

Source

lucalategola

Most helpful comment

The admin menu needs a rewrite. We'll be working on that soon.

fletch3555 on 21 Sep 2017

👍3

All 4 comments

I'm also experiencing this issue

scottybo on 21 Sep 2017

The admin menu needs a rewrite. We'll be working on that soon.

fletch3555 on 21 Sep 2017

👍3

I actually rewrote the admin menu a few weeks ago. This should be closed.

fletch3555 on 19 Oct 2017

This issue has been automatically locked since there has not been any recent activity after it was closed. If you have further questions please ask in our Slack group.