Enforce tenant member permissions

app/Http/Controllers/Api/Tenant/LiveShowLinkController.php

@@ -4,6 +4,7 @@ namespace App\Http\Controllers\Api\Tenant;
 
 use App\Http\Controllers\Controller;
 use App\Models\Event;
+use App\Support\TenantMemberPermissions;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
 use SimpleSoftwareIO\QrCode\Facades\QrCode;
@@ -13,6 +14,7 @@ class LiveShowLinkController extends Controller
     public function show(Request $request, Event $event): JsonResponse
     {
         $this->authorizeEvent($request, $event);
+        TenantMemberPermissions::ensureEventPermission($request, $event, 'live-show:manage');
 
         $token = $event->ensureLiveShowToken();
 
@@ -24,6 +26,7 @@ class LiveShowLinkController extends Controller
     public function rotate(Request $request, Event $event): JsonResponse
     {
         $this->authorizeEvent($request, $event);
+        TenantMemberPermissions::ensureEventPermission($request, $event, 'live-show:manage');
 
         $token = $event->rotateLiveShowToken();