X-Git-Url: http://source.bookstackapp.com/bookstack/blobdiff_plain/859934d6a3f9c94298dee1f177b95f192f4a90b7..refs/pull/3918/head:/app/Uploads/Attachment.php diff --git a/app/Uploads/Attachment.php b/app/Uploads/Attachment.php index a470ec534..6c7066ff9 100644 --- a/app/Uploads/Attachment.php +++ b/app/Uploads/Attachment.php @@ -2,7 +2,7 @@ namespace BookStack\Uploads; -use BookStack\Auth\Permissions\PermissionService; +use BookStack\Auth\Permissions\PermissionApplicator; use BookStack\Auth\User; use BookStack\Entities\Models\Entity; use BookStack\Entities\Models\Page; @@ -89,11 +89,10 @@ class Attachment extends Model */ public function scopeVisible(): Builder { - $permissionService = app()->make(PermissionService::class); + $permissions = app()->make(PermissionApplicator::class); - return $permissionService->filterRelatedEntity( - Page::class, - Attachment::query(), + return $permissions->restrictPageRelationQuery( + self::query(), 'attachments', 'uploaded_to' );