Check model view policy on related records pages

filamentphp · Aug 16, 2024 · 72f418e · 72f418e
1 parent 02d2852
commit 72f418e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/panels/src/Resources/Pages/ManageRelatedRecords.php b/packages/panels/src/Resources/Pages/ManageRelatedRecords.php
@@ -105,7 +105,7 @@ public static function canAccess(array $parameters = []): bool
         $model = $record->{static::getRelationshipName()}()->getQuery()->getModel()::class;
 
         try {
-            return authorize('viewAny', $model, static::shouldCheckPolicyExistence())->allowed();
+            return authorize('view', $record, static::shouldCheckPolicyExistence())->allowed() && authorize('viewAny', $model, static::shouldCheckPolicyExistence())->allowed();
         } catch (AuthorizationException $exception) {
             return $exception->toResponse()->allowed();
         }