Guests must not be able to create Sites
dshoreman opened this issue · comments
Dave Shoreman commented
According to tests/Feature/CreateSiteTest.php, guests can create sites. This is bad. VERY bad.
Test needs to be changed to GuestCanNotCreateSite
with a separate test added to make sure it works for authed users (which can utilise the RequiresAuth
trait added previously).
Naturally, the controller/routes will also need to be updated to fit this behaviour.