/statistics/member raises error if not auth'd

inex · May 19, 2022 · f9d2f99 · f9d2f99
1 parent c623390
commit f9d2f99
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/app/Http/Controllers/StatisticsController.php b/app/Http/Controllers/StatisticsController.php
@@ -393,6 +393,10 @@ public function member( StatisticsRequest $r, Customer $cust = null ): RedirectR
             $cust = Auth::getUser()->customer;
         }
 
+        if( $cust == null ) {
+            abort( 403, "You are not authorised to view this member's graphs." );
+        }
+
         $grapher = App::make( Grapher::class );
 
         // if the customer is authorised, then so too are all of their virtual and physical interfaces: