From e90f21dce4be97d1b89400073b730e9d63e25a24 Mon Sep 17 00:00:00 2001 From: Greg Roach Date: Mon, 27 Apr 2026 19:49:40 +0100 Subject: Module method names are case insensitive --- app/Http/RequestHandlers/ModuleAction.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/Http/RequestHandlers/ModuleAction.php b/app/Http/RequestHandlers/ModuleAction.php index 3fdceed9e5..6a6c3125be 100644 --- a/app/Http/RequestHandlers/ModuleAction.php +++ b/app/Http/RequestHandlers/ModuleAction.php @@ -72,7 +72,7 @@ final class ModuleAction implements RequestHandlerInterface $method = $verb . $action . 'Action'; // Actions with "Admin" in the name are for administrators only. - if (str_contains($action, 'Admin') && !Auth::isAdmin($user)) { + if (str_contains(strtolower($action), 'admin') && !Auth::isAdmin($user)) { throw new HttpAccessDeniedException('Admin only action'); } -- cgit v1.3