th.guenther/mareike
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed permission management

Browse Source
This commit is contained in:
Thomas Günther
2026-06-23 18:46:01 +02:00
parent 5c514e9ff5
commit e09987f5a8
4 changed files with 13 additions and 54 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Repositories/EventRepository.php
+4 -22
View File
@@ -77,38 +77,20 @@ class EventRepository {
}
public function getEventsByCriteria(array $criteria, $accessCheck = true) : array {
$tenant = app('tenant');
$canSeeAll = false;
$user = Auth()->user();
if (!$accessCheck) {
$canSeeAll = true;
} else {
if (
new AuthCheckProvider()->isAdministrator() ||
$user->user_role_local_group === UserRole::USER_ROLE_ADMIN
) {
if (
$user->user_role_main === UserRole::USER_ROLE_ADMIN ||
in_array($user->user_role_local_group, [UserRole::USER_ROLE_GROUP_LEADER, UserRole::USER_ROLE_ADMIN])
) {
$canSeeAll = true;
}
} else {
if (
in_array($user->user_role_main, [UserRole::USER_ROLE_GROUP_LEADER, UserRole::USER_ROLE_ADMIN])
) {
$canSeeAll = true;
}
}
$canSeeAll = in_array(new AuthCheckProvider()->getUserRole(), [
UserRole::USER_ROLE_ADMIN, UserRole::USER_ROLE_GROUP_LEADER
]);
}
$visibleEvents = [];
/** @var Event $event */
foreach (Event::where($criteria)->orderBy('start_date')->get() as $event) {
if ($canSeeAll || !$accessCheck || $event->eventManagers()->where('user_id', $user->id)->exists()) {
if ($canSeeAll || $event->eventManagers()->where('user_id', $user->id)->exists()) {
$visibleEvents[] = $event;
}
}