Update permission check for Stripe payment intent
Replaced 'charge_order_stripe' with a more general 'charge_order' permission check in the Stripe payment intent endpoint. This ensures consistent permission handling across payment modules.
This commit is contained in:
@@ -267,7 +267,7 @@ class ordersRoute
|
||||
$this->post('/orders/module/stripe/payment_intent', function () {
|
||||
// Require the user to be logged in
|
||||
global $response;
|
||||
$this->requirePermission('charge_order_stripe');
|
||||
$this->requirePermission('charge_order');
|
||||
// Get the user object
|
||||
$user = (new authentication())->get_user();
|
||||
// Check if the request was successful
|
||||
|
||||
Reference in New Issue
Block a user