update access

2026-05-11 14:48:17 +07:00
parent 66129792c8
commit 50222eb5d4
6 changed files with 9407 additions and 17 deletions
@@ -35,7 +35,9 @@ class DistributionController extends Controller

    public function store(Request $request): JsonResponse
    {
-        Gate::authorize('petani');
+        if (!Gate::any(['super_admin', 'petani','fasilitator', 'offtaker'])) {
+            abort(403);
+        }

        $validated = $request->validate([
            'offtaker_id' => 'required|numeric',
@@ -58,8 +60,9 @@ class DistributionController extends Controller

    public function update(Request $request, string $id): JsonResponse
    {
-        // Biasanya Admin atau Offtaker yang melakukan update grade/price
-        Gate::authorize('super_admin'); 
+        if (!Gate::any(['super_admin', 'petani','fasilitator', 'offtaker'])) {
+            abort(403);
+        } 

        $distribution = Distribution::findOrFail($id);
        
@@ -82,8 +85,10 @@ class DistributionController extends Controller
    }

    public function batchUpsert(Request $request): JsonResponse
-{
-    Gate::authorize('any', ['super_admin', 'petani']);
+    {
+        if (!Gate::any(['super_admin', 'petani','fasilitator', 'offtaker'])) {
+            abort(403);
+        }
    
    $validated = $request->validate([
        'distributions' => ['required', 'array'],