Fix for document permissions (#2415)

invoiceninja · Oct 5, 2018 · e254cf3 · e254cf3
1 parent 046085e
commit e254cf3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Models/EntityModel.php b/app/Models/EntityModel.php
@@ -179,7 +179,7 @@ public function scopeScope($query, $publicId = false, $accountId = false)
             }
         }
 
-        if (Auth::check() && method_exists($this, 'getEntityType') && ! Auth::user()->hasPermission('view_' . $this->getEntityType())  && $this->getEntityType() != ENTITY_TAX_RATE) {
+        if (Auth::check() && method_exists($this, 'getEntityType') && ! Auth::user()->hasPermission('view_' . $this->getEntityType())  && $this->getEntityType() != ENTITY_TAX_RATE && $this->getEntityType() != ENTITY_DOCUMENT) {
             $query->where(Utils::pluralizeEntityType($this->getEntityType()) . '.user_id', '=', Auth::user()->id);
         }