Fixed permission management
This commit is contained in:
@@ -6,6 +6,7 @@ use App\Enumerations\InvoiceStatus;
|
||||
use App\Enumerations\UserRole;
|
||||
use App\Models\CostUnit;
|
||||
use App\Models\Invoice;
|
||||
use App\Providers\AuthCheckProvider;
|
||||
use App\Resources\InvoiceResource;
|
||||
use App\ValueObjects\Amount;
|
||||
use Illuminate\Database\Eloquent\Collection;
|
||||
@@ -83,19 +84,9 @@ class InvoiceRepository {
|
||||
return $invoice;
|
||||
}
|
||||
|
||||
$user = auth()->user();
|
||||
if ($user->user_role_main === UserRole::USER_ROLE_ADMIN) {
|
||||
return $invoice;
|
||||
}
|
||||
return in_array(new AuthCheckProvider()->getUserRole(), [
|
||||
UserRole::USER_ROLE_ADMIN, UserRole::USER_ROLE_GROUP_LEADER
|
||||
]) ? $invoice : null;
|
||||
|
||||
if (app('tenant')->slug === 'lv' && $user->user_role_main === UserRole::USER_ROLE_GROUP_LEADER) {
|
||||
return $invoice;
|
||||
}
|
||||
|
||||
if (app('tenant')->slug !== 'lv' && $user->local_group === app('tenant')->slug && $user->user_role_local_group === UserRole::USER_ROLE_GROUP_LEADER) {
|
||||
return $invoice;
|
||||
}
|
||||
|
||||
return null;
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user