From 2966904205d4073485f697b0a4c94d5a8eca01ca Mon Sep 17 00:00:00 2001
From: "fauzgabriel@gmail.com" <fauzgabriel@gmail.com>
Date: Tue, 28 Apr 2026 19:16:44 +0700
Subject: [PATCH] offtaker authorization

Co-authored-by: Copilot <copilot@github.com>
---
 app/Http/Controllers/Api/OfftakerController.php | 12 ++++++------
 app/Http/Controllers/Api/ProfileController.php  |  2 +-
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/app/Http/Controllers/Api/OfftakerController.php b/app/Http/Controllers/Api/OfftakerController.php
index af7d17e..7d06840 100644
--- a/app/Http/Controllers/Api/OfftakerController.php
+++ b/app/Http/Controllers/Api/OfftakerController.php
@@ -12,7 +12,7 @@ class OfftakerController extends Controller
 {
     public function index(): JsonResponse
     {
-        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin'])) {
+        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin','offtaker'])) {
             abort(403, 'Unauthorized');
         }
         $listOfftaker = Offtaker::all();
@@ -22,7 +22,7 @@ class OfftakerController extends Controller
 
     public function store(Request $request): JsonResponse
     {
-        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin'])) {
+        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin','offtaker'])) {
             abort(403, 'Unauthorized');
         }
 
@@ -51,7 +51,7 @@ class OfftakerController extends Controller
 
     public function show(string $id): JsonResponse
     {
-        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin'])) {
+        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin','offtaker'])) {
             abort(403, 'Unauthorized');
         }
         $offtaker = Offtaker::findOrFail($id);
@@ -60,7 +60,7 @@ class OfftakerController extends Controller
 
     public function update(Request $request, string $id): JsonResponse
     {
-        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin'])) {
+        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin','offtaker'])) {
             abort(403, 'Unauthorized');
         }
         $offtaker = Offtaker::findOrFail($id);
@@ -80,7 +80,7 @@ class OfftakerController extends Controller
 
     public function destroy(string $id): JsonResponse
     {
-        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin'])) {
+        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin','offtaker'])) {
             abort(403, 'Unauthorized');
         }
         Offtaker::findOrFail($id)->delete();
@@ -93,7 +93,7 @@ class OfftakerController extends Controller
      */
     public function batchUpsert(Request $request): JsonResponse
     {
-        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin'])) {
+        if (!Gate::any(['super_admin', 'petani', 'fasilitator', 'admin','offtaker'])) {
             abort(403, 'Unauthorized');
         }
 
diff --git a/app/Http/Controllers/Api/ProfileController.php b/app/Http/Controllers/Api/ProfileController.php
index 0545b2b..2d21ae5 100644
--- a/app/Http/Controllers/Api/ProfileController.php
+++ b/app/Http/Controllers/Api/ProfileController.php
@@ -23,7 +23,7 @@ class ProfileController extends Controller
      */
     public function index(Request $request)
     {
-        Gate::authorize('fasilitator', 'offtaker');
+        Gate::authorize('fasilitator');
 
         $user = Auth::user();
         $profile = $user->profile;