api(application): fix api key permissions

2026-04-20 07:13:45 +02:00 · 2021-03-06 15:41:34 -07:00
parent 7d80b5fee7
commit 264c3865b2
2 changed files with 2 additions and 3 deletions
--- a/app/Transformers/Api/Application/BaseTransformer.php
+++ b/app/Transformers/Api/Application/BaseTransformer.php
@@ -84,7 +84,7 @@ abstract class BaseTransformer extends TransformerAbstract
     */
    protected function authorize(string $resource): bool
    {
-        if ($this->isRootAdmin()) {
+        if ($this->getKey()->key_type === ApiKey::TYPE_ACCOUNT && $this->isRootAdmin()) {
            return true;
        }