浏览代码

fix: authorization for member

父节点
当前提交
33ce055d1d
共有 2 个文件被更改,包括 9 次插入4 次删除
  1. 5
    0
      app/Http/Controllers/MemberController.php
  2. 4
    4
      app/Policies/MemberPolicy.php

+ 5
- 0
app/Http/Controllers/MemberController.php 查看文件

@@ -12,6 +12,11 @@ use Inertia\Inertia;
12 12
 
13 13
 class MemberController extends Controller
14 14
 {
15
+    public function __construct()
16
+    {
17
+        $this->authorizeResource(Member::class);
18
+    }
19
+
15 20
     /**
16 21
      * Display a listing of the resource.
17 22
      *

+ 4
- 4
app/Policies/MemberPolicy.php 查看文件

@@ -18,7 +18,7 @@ class MemberPolicy
18 18
      */
19 19
     public function viewAny(User $user)
20 20
     {
21
-        //
21
+        return $user->role_id === 3;
22 22
     }
23 23
 
24 24
     /**
@@ -30,7 +30,7 @@ class MemberPolicy
30 30
      */
31 31
     public function view(User $user, Member $member)
32 32
     {
33
-        //
33
+        return $user->role_id === 3;
34 34
     }
35 35
 
36 36
     /**
@@ -41,7 +41,7 @@ class MemberPolicy
41 41
      */
42 42
     public function create(User $user)
43 43
     {
44
-        //
44
+        return $user->role_id === 3;
45 45
     }
46 46
 
47 47
     /**
@@ -53,7 +53,7 @@ class MemberPolicy
53 53
      */
54 54
     public function update(User $user, Member $member)
55 55
     {
56
-        //
56
+        return $user->role_id === 3;
57 57
     }
58 58
 
59 59
     /**