gate allowed user list

Co-authored-by: Copilot <copilot@github.com>
This commit is contained in:
2026-04-27 09:29:17 +07:00
co-authored by Copilot
parent 3e7bbb4109
commit 9a2dcadba9
2 changed files with 13 additions and 5 deletions
@@ -13,7 +13,7 @@ class DistributionController extends Controller
{ {
public function index(): JsonResponse public function index(): JsonResponse
{ {
if (!Gate::any(['super_admin', 'petani'])) { if (!Gate::any(['super_admin', 'petani','fasilitator'])) {
abort(403); abort(403);
} }
+12 -4
View File
@@ -29,7 +29,9 @@ class PanenController extends Controller
public function store(Request $request): JsonResponse public function store(Request $request): JsonResponse
{ {
Gate::authorize(['petani', 'fasilitator']); if (!Gate::any(['petani', 'fasilitator'])) {
abort(403);
}
$validated = $request->validate([ $validated = $request->validate([
'land_id' => ['required', 'integer'], 'land_id' => ['required', 'integer'],
@@ -56,14 +58,18 @@ class PanenController extends Controller
public function show(string $id): JsonResponse public function show(string $id): JsonResponse
{ {
Gate::authorize(['petani', 'fasilitator']); if (!Gate::any(['petani', 'fasilitator'])) {
abort(403);
}
$panen = Panen::findOrFail($id); $panen = Panen::findOrFail($id);
return response()->json($panen); return response()->json($panen);
} }
public function update(Request $request, string $id): JsonResponse public function update(Request $request, string $id): JsonResponse
{ {
Gate::authorize(['petani', 'fasilitator']); if (!Gate::any(['petani', 'fasilitator'])) {
abort(403);
}
$panen = Panen::findOrFail($id); $panen = Panen::findOrFail($id);
$validated = $request->validate([ $validated = $request->validate([
@@ -89,7 +95,9 @@ class PanenController extends Controller
*/ */
public function batchUpsert(Request $request): JsonResponse public function batchUpsert(Request $request): JsonResponse
{ {
Gate::authorize(['petani', 'fasilitator']); if (Gate::authorize(['petani', 'fasilitator'])) {
abort(403);
}
$profileId = Auth::user()->profile->id; $profileId = Auth::user()->profile->id;
$validated = $request->validate([ $validated = $request->validate([