Addd partner_id check in GET /preorder
This commit is contained in:
@@ -94,6 +94,10 @@ class PreorderApicontroller extends mfBaseApicontroller {
|
||||
}
|
||||
}
|
||||
|
||||
if($preorder->partner_id != $this->me->address_id) {
|
||||
return mfResponse::NotFound(["message" => "Preorder not found"]);
|
||||
}
|
||||
|
||||
$return = $preorder->getApiArray();
|
||||
if(!$return) {
|
||||
return mfResponse::NotFound(["message" => "Preorder not found"]);
|
||||
|
||||
Reference in New Issue
Block a user