gate allowed user list

Co-authored-by: Copilot <copilot@github.com>
This commit is contained in:
2026-04-27 09:29:17 +07:00
co-authored by Copilot
parent 3e7bbb4109
commit 9a2dcadba9
2 changed files with 13 additions and 5 deletions
@@ -13,7 +13,7 @@ class DistributionController extends Controller
{
public function index(): JsonResponse
{
if (!Gate::any(['super_admin', 'petani'])) {
if (!Gate::any(['super_admin', 'petani','fasilitator'])) {
abort(403);
}
+12 -4
View File
@@ -29,7 +29,9 @@ class PanenController extends Controller
public function store(Request $request): JsonResponse
{
Gate::authorize(['petani', 'fasilitator']);
if (!Gate::any(['petani', 'fasilitator'])) {
abort(403);
}
$validated = $request->validate([
'land_id' => ['required', 'integer'],
@@ -56,14 +58,18 @@ class PanenController extends Controller
public function show(string $id): JsonResponse
{
Gate::authorize(['petani', 'fasilitator']);
if (!Gate::any(['petani', 'fasilitator'])) {
abort(403);
}
$panen = Panen::findOrFail($id);
return response()->json($panen);
}
public function update(Request $request, string $id): JsonResponse
{
Gate::authorize(['petani', 'fasilitator']);
if (!Gate::any(['petani', 'fasilitator'])) {
abort(403);
}
$panen = Panen::findOrFail($id);
$validated = $request->validate([
@@ -89,7 +95,9 @@ class PanenController extends Controller
*/
public function batchUpsert(Request $request): JsonResponse
{
Gate::authorize(['petani', 'fasilitator']);
if (Gate::authorize(['petani', 'fasilitator'])) {
abort(403);
}
$profileId = Auth::user()->profile->id;
$validated = $request->validate([