update access

app/Http/Controllers/Api/DistributionController.php

@@ -35,7 +35,9 @@ class DistributionController extends Controller
 
     public function store(Request $request): JsonResponse
     {
-        Gate::authorize('petani');
+        if (!Gate::any(['super_admin', 'petani','fasilitator', 'offtaker'])) {
+            abort(403);
+        }
 
         $validated = $request->validate([
             'offtaker_id' => 'required|numeric',
@@ -58,8 +60,9 @@ class DistributionController extends Controller
 
     public function update(Request $request, string $id): JsonResponse
     {
-        // Biasanya Admin atau Offtaker yang melakukan update grade/price
-        Gate::authorize('super_admin'); 
+        if (!Gate::any(['super_admin', 'petani','fasilitator', 'offtaker'])) {
+            abort(403);
+        } 
 
         $distribution = Distribution::findOrFail($id);
         
@@ -83,7 +86,9 @@ class DistributionController extends Controller
 
     public function batchUpsert(Request $request): JsonResponse
     {
-    Gate::authorize('any', ['super_admin', 'petani']);
+        if (!Gate::any(['super_admin', 'petani','fasilitator', 'offtaker'])) {
+            abort(403);
+        }
     
     $validated = $request->validate([
         'distributions' => ['required', 'array'],

app/Http/Controllers/Api/LahanController.php

@@ -77,7 +77,7 @@ class LahanController extends Controller
      */
     public function store(Request $request): JsonResponse
     {
-        if (!Gate::any(['petani', 'fasilitator'])) {
+        if (!Gate::any(['petani', 'fasilitator','super_admin'])) {
             abort(403);
         }
 
@@ -151,7 +151,7 @@ class LahanController extends Controller
      */
     public function update(Request $request, string $id): JsonResponse
     {
-        if (!Gate::any(['petani', 'fasilitator'])) {
+        if (!Gate::any(['petani', 'fasilitator','super_admin'])) {
             abort(403);
         }
 
@@ -181,7 +181,7 @@ class LahanController extends Controller
      */
     public function destroy(string $id): JsonResponse
     {
-        if (!Gate::any(['petani', 'fasilitator'])) {
+        if (!Gate::any(['petani', 'fasilitator','super_admin'])) {
             abort(403);
         }
 
@@ -199,7 +199,7 @@ class LahanController extends Controller
 
     public function batchUpsert(Request $request): JsonResponse
     {
-        if (!Gate::any(['petani', 'fasilitator'])) {
+        if (!Gate::any(['petani', 'fasilitator','super_admin'])) {
             abort(403);
         }
         

app/Http/Controllers/Api/PanenController.php

@@ -29,7 +29,7 @@ class PanenController extends Controller
 
     public function store(Request $request): JsonResponse
     {
-        if (!Gate::any(['petani', 'fasilitator'])) {
+        if (!Gate::any(['petani', 'fasilitator','super_admin'])) {
             abort(403);
         }
 
@@ -67,7 +67,7 @@ class PanenController extends Controller
 
     public function update(Request $request, string $id): JsonResponse
     {
-        if (!Gate::any(['petani', 'fasilitator'])) {
+        if (!Gate::any(['petani', 'fasilitator','super_admin'])) {
             abort(403);
         }
         $panen = Panen::findOrFail($id);
@@ -95,7 +95,7 @@ class PanenController extends Controller
      */
     public function batchUpsert(Request $request): JsonResponse
     {
-        if (Gate::authorize(['petani', 'fasilitator'])) {
+        if (Gate::authorize(['petani', 'fasilitator','super_admin'])) {
             abort(403);
         }
         $profileId = Auth::user()->profile->id;

app/Http/Controllers/Api/ProfileController.php

@@ -95,7 +95,7 @@ class ProfileController extends Controller
      */
     public function store(Request $request)
     {
-        Gate::authorize('fasilitator');
+        Gate::authorize('fasilitator','super_admin');
 
         $validated = $request->validate([
             'nama' => ['required', 'string', 'max:255'],
@@ -237,7 +237,7 @@ class ProfileController extends Controller
 
     public function downloadFile(string $id, string $type): JsonResponse | BinaryFileResponse
     {
-        if (!Gate::any(['petani', 'fasilitator'])) {
+        if (!Gate::any(['petani', 'fasilitator', 'super_admin'])) {
             abort(403);
         }
 

app/Http/Controllers/Api/TanamanController.php

@@ -91,7 +91,7 @@ class TanamanController extends Controller
      */
     public function store(Request $request): JsonResponse
     {
-        if (!Gate::any(['petani', 'fasilitator'])) {
+        if (!Gate::any(['petani', 'fasilitator','super_admin'])) {
             abort(403);
         }
         $profile = Auth::user()->profile;
@@ -151,7 +151,7 @@ class TanamanController extends Controller
      */
     public function update(Request $request, string $id): JsonResponse
     {
-        if (!Gate::any(['petani', 'fasilitator'])) {
+        if (!Gate::any(['petani', 'fasilitator','super_admin'])) {
             abort(403);
         }
         $tanaman = Tanaman::findOrFail($id);
@@ -186,7 +186,7 @@ class TanamanController extends Controller
      */
     public function destroy(string $id): JsonResponse
     {
-        if (!Gate::any(['petani', 'fasilitator'])) {
+        if (!Gate::any(['petani', 'fasilitator','super_admin'])) {
             abort(403);
         }
         $tanaman = Tanaman::findOrFail($id);