Add some missing authorization checks

Author: Riari

src/Http/Livewire/Pages/CategoryCreate.php

@@ -38,6 +38,10 @@ class CategoryCreate extends Component
 
     public function mount(Request $request)
     {
+        if (!CategoryAuthorization::create($request->user())) {
+            abort(404);
+        }
+
         $categories = CategoryAccess::getFilteredTreeFor($request->user())->toTree();
 
         // TODO: This is a workaround for a serialisation issue. See: https://github.com/lazychaser/laravel-nestedset/issues/487

src/Http/Livewire/Pages/CategoryEdit.php

@@ -39,13 +39,18 @@ class CategoryEdit extends Component
 
     public function mount(Request $request)
     {
+        $category = $request->route('category');
+
+        if (!CategoryAuthorization::edit($request->user(), $category)) {
+            abort(404);
+        }
+
         $categories = CategoryAccess::getFilteredTreeFor($request->user())->toTree();
 
         // TODO: This is a workaround for a serialisation issue. See: https://github.com/lazychaser/laravel-nestedset/issues/487
         //       Once the issue is fixed, this can be removed.
         $this->categories = CategoryAccess::removeParentRelationships($categories);
 
-        $category = $request->route('category');
         $this->category = $category;
         $this->title = $category->title;
         $this->description = $category->description ?? "";

src/Http/Livewire/Pages/ThreadCreate.php

@@ -32,6 +32,10 @@ public function mount(Request $request)
         $this->category = $request->route('category');
         $this->breadcrumbs_append = [trans('forum::threads.new_thread')];
 
+        if (!CategoryAuthorization::createThreads($request->user(), $this->category)) {
+            abort(403);
+        }
+
         UserCreatingThread::dispatch($request->user(), $this->category);
     }