Enforce board vote restrictions on the server - #377

Open

bjarn wants to merge 1 commit into

bjarn:codex/enforce-board-vote-block

bjarn commented Oct 2, 2026

Contributor

Summary

Reject direct controller and Livewire vote actions when the board blocks votes.
Add a model-level guard for all item vote call sites.
Correct and strengthen the existing blocked-vote regression test.

Security impact

A user could bypass the hidden vote interface and call a server action directly.

Tests

php artisan test --compact tests/Feature/Item/VoteOnItemTest.php


          Enforce board vote restrictions

dffcbc0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet