Ban user access to hidden ticket for owner only

Author: xaviqv

src/Controllers/TicketsController.php

@@ -1225,10 +1225,6 @@ public function show($id)
 		// Select Ticket and properties
 		$ticket = $ticket->select($a_select)->findOrFail($id);
 
-		if ($ticket->hidden and $member->currentLevel() == 1){
-			return redirect()->route(Setting::grab('main_route').'.index')->with('warning', trans('panichd::lang.you-are-not-permitted-to-access'));
-		}
-
         if (version_compare(app()->version(), '5.3.0', '>=')) {
             $a_reasons = $ticket->category->closingReasons()->pluck('text','id')->toArray();
 			$a_tags_selected = $ticket->tags()->pluck('id')->toArray();

src/Middleware/UserAccessMiddleware.php

@@ -30,8 +30,8 @@ public function handle($request, Closure $next)
 		$ticket = $this->getRouteTicket($request);
 
 		// Ticket Owner has access
-		if ($member->isTicketOwner($ticket->id)) {
-			return $next($request);
+		if ($member->isTicketOwner($ticket->id) and !$ticket->hidden) {
+            return $next($request);
 		}
 
 		if ($member->isAgent()) {