X-Git-Url: http://source.bookstackapp.com/bookstack/blobdiff_plain/0d4db603a47a6cd8889bb7b591bdc2cffbcac134..refs/pull/635/head:/app/Http/Controllers/UserController.php diff --git a/app/Http/Controllers/UserController.php b/app/Http/Controllers/UserController.php index 5c10133a2..397bb2922 100644 --- a/app/Http/Controllers/UserController.php +++ b/app/Http/Controllers/UserController.php @@ -251,7 +251,9 @@ class UserController extends Controller } public function switchBookView($id, Request $request) { - $this->checkPermission('users-manage'); + $this->checkPermissionOr('users-manage', function () use ($id) { + return $this->currentUser->id == $id; + }); $viewType = $request->get('book_view_type'); if (!in_array($viewType, ['grid', 'list'])) {