From 9a2dcadba9115201143ed0873e58e77ddea14737 Mon Sep 17 00:00:00 2001
From: "fauzgabriel@gmail.com" <fauzgabriel@gmail.com>
Date: Mon, 27 Apr 2026 09:29:17 +0700
Subject: [PATCH] gate allowed user list

Co-authored-by: Copilot <copilot@github.com>
---
 .../Controllers/Api/DistributionController.php   |  2 +-
 app/Http/Controllers/Api/PanenController.php     | 16 ++++++++++++----
 2 files changed, 13 insertions(+), 5 deletions(-)

diff --git a/app/Http/Controllers/Api/DistributionController.php b/app/Http/Controllers/Api/DistributionController.php
index 888927c..bf51bfe 100644
--- a/app/Http/Controllers/Api/DistributionController.php
+++ b/app/Http/Controllers/Api/DistributionController.php
@@ -13,7 +13,7 @@ class DistributionController extends Controller
 {
     public function index(): JsonResponse
     {
-        if (!Gate::any(['super_admin', 'petani'])) {
+        if (!Gate::any(['super_admin', 'petani','fasilitator'])) {
             abort(403);
         }
 
diff --git a/app/Http/Controllers/Api/PanenController.php b/app/Http/Controllers/Api/PanenController.php
index bcd44de..87c117e 100644
--- a/app/Http/Controllers/Api/PanenController.php
+++ b/app/Http/Controllers/Api/PanenController.php
@@ -29,7 +29,9 @@ class PanenController extends Controller
 
     public function store(Request $request): JsonResponse
     {
-        Gate::authorize(['petani', 'fasilitator']);
+        if (!Gate::any(['petani', 'fasilitator'])) {
+            abort(403);
+        }
 
         $validated = $request->validate([
             'land_id' => ['required', 'integer'],
@@ -56,14 +58,18 @@ class PanenController extends Controller
 
     public function show(string $id): JsonResponse
     {
-        Gate::authorize(['petani', 'fasilitator']);
+        if (!Gate::any(['petani', 'fasilitator'])) {
+            abort(403);
+        }
         $panen = Panen::findOrFail($id);
         return response()->json($panen);
     }
 
     public function update(Request $request, string $id): JsonResponse
     {
-        Gate::authorize(['petani', 'fasilitator']);
+        if (!Gate::any(['petani', 'fasilitator'])) {
+            abort(403);
+        }
         $panen = Panen::findOrFail($id);
 
         $validated = $request->validate([
@@ -89,7 +95,9 @@ class PanenController extends Controller
      */
     public function batchUpsert(Request $request): JsonResponse
     {
-        Gate::authorize(['petani', 'fasilitator']);
+        if (Gate::authorize(['petani', 'fasilitator'])) {
+            abort(403);
+        }
         $profileId = Auth::user()->profile->id;
 
         $validated = $request->validate([