CC-34931 Fixed inverted permissions check on company user enable/disa…

…ble actions. (#2572) CC-34931 Fixed inverted permissions check on company user status change.
spryker-shop · Feb 27, 2025 · 38c2caa · 38c2caa
1 parent b94ccb3
commit 38c2caa
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/SprykerShop/Yves/CompanyPage/Controller/CompanyUserStatusController.php b/src/SprykerShop/Yves/CompanyPage/Controller/CompanyUserStatusController.php
@@ -74,7 +74,7 @@ class CompanyUserStatusController extends AbstractCompanyController
      */
     public function enableAction(Request $request): RedirectResponse
     {
-        if ($this->can(static::PERMISSION_COMPANY_USER_STATUS_CHANGE)) {
+        if (!$this->can(static::PERMISSION_COMPANY_USER_STATUS_CHANGE)) {
             throw new AccessDeniedHttpException();
         }
 
@@ -107,7 +107,7 @@ public function enableAction(Request $request): RedirectResponse
      */
     public function disableAction(Request $request): RedirectResponse
     {
-        if ($this->can(static::PERMISSION_COMPANY_USER_STATUS_CHANGE)) {
+        if (!$this->can(static::PERMISSION_COMPANY_USER_STATUS_CHANGE)) {
             throw new AccessDeniedHttpException();
         }