jeremy/RecruIT
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: bypass tenant scope in AttemptController::show - candidates (no tenant_id) were getting 404 on quiz start

Browse Source
This commit is contained in:
jeremy bayse
2026-04-14 19:24:29 +02:00
parent de6938d2e6
commit 479a7e35d1
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/Http/Controllers/AttemptController.php
View File

@@ -48,8 +48,12 @@ class AttemptController extends Controller
abort(403); abort(403);
} }
} }
public function show(Quiz $quiz) public function show(int $quizId)
{ {
// Bypass tenant global scope: candidates have no tenant_id
// but should still access their assigned quizzes
$quiz = Quiz::withoutGlobalScopes()->findOrFail($quizId);
$candidate = auth()->user()->candidate; $candidate = auth()->user()->candidate;
if (!$candidate) { if (!$candidate) {