404 on invisble bundles

spatie · Nov 21, 2024 · 50a7d23 · 50a7d23
1 parent 2a611bf
commit 50a7d23
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/app/Http/Controllers/BundlesController.php b/app/Http/Controllers/BundlesController.php
@@ -9,7 +9,10 @@ class BundlesController
 {
     public function show(Bundle $bundle): View
     {
+        abort_unless($bundle->visible || current_user()?->hasAccessToUnReleasedProducts(), 404);
+
         $payLink = null;
+
         if (current_user()) {
             $payLink = current_user()->getPayLinkForBundle($bundle);
         }