Explorar el Código

fix: authorization for member

Muhammad Iqbal Afandi hace 3 años
padre
commit
33ce055d1d
Se han modificado 2 ficheros con 9 adiciones y 4 borrados
  1. 5
    0
      app/Http/Controllers/MemberController.php
  2. 4
    4
      app/Policies/MemberPolicy.php

+ 5
- 0
app/Http/Controllers/MemberController.php Ver fichero

12
 
12
 
13
 class MemberController extends Controller
13
 class MemberController extends Controller
14
 {
14
 {
15
+    public function __construct()
16
+    {
17
+        $this->authorizeResource(Member::class);
18
+    }
19
+
15
     /**
20
     /**
16
      * Display a listing of the resource.
21
      * Display a listing of the resource.
17
      *
22
      *

+ 4
- 4
app/Policies/MemberPolicy.php Ver fichero

18
      */
18
      */
19
     public function viewAny(User $user)
19
     public function viewAny(User $user)
20
     {
20
     {
21
-        //
21
+        return $user->role_id === 3;
22
     }
22
     }
23
 
23
 
24
     /**
24
     /**
30
      */
30
      */
31
     public function view(User $user, Member $member)
31
     public function view(User $user, Member $member)
32
     {
32
     {
33
-        //
33
+        return $user->role_id === 3;
34
     }
34
     }
35
 
35
 
36
     /**
36
     /**
41
      */
41
      */
42
     public function create(User $user)
42
     public function create(User $user)
43
     {
43
     {
44
-        //
44
+        return $user->role_id === 3;
45
     }
45
     }
46
 
46
 
47
     /**
47
     /**
53
      */
53
      */
54
     public function update(User $user, Member $member)
54
     public function update(User $user, Member $member)
55
     {
55
     {
56
-        //
56
+        return $user->role_id === 3;
57
     }
57
     }
58
 
58
 
59
     /**
59
     /**