Update permission check for Stripe payment intent

Replaced 'charge_order_stripe' with a more general 'charge_order' permission check in the Stripe payment intent endpoint. This ensures consistent permission handling across payment modules.
This commit is contained in:
Jepp9350
2025-04-28 09:01:15 +02:00
parent c56955ee28
commit c19ed3389c
+1 -1
View File
@@ -267,7 +267,7 @@ class ordersRoute
$this->post('/orders/module/stripe/payment_intent', function () {
// Require the user to be logged in
global $response;
$this->requirePermission('charge_order_stripe');
$this->requirePermission('charge_order');
// Get the user object
$user = (new authentication())->get_user();
// Check if the request was successful