added permission checker for data master
This commit is contained in:
@@ -10,6 +10,7 @@ class CostCentreController extends Controller
|
||||
{
|
||||
public function index()
|
||||
{
|
||||
$this->checkAuthorization(auth()->user(), ['cost.view']);
|
||||
return view('backend.pages.master.cost.index', [
|
||||
'costs' => CostCentre::all()
|
||||
]);
|
||||
@@ -17,11 +18,13 @@ class CostCentreController extends Controller
|
||||
|
||||
public function create()
|
||||
{
|
||||
$this->checkAuthorization(auth()->user(), ['cost.create']);
|
||||
return view('backend.pages.master.cost.create');
|
||||
}
|
||||
|
||||
public function store(Request $request)
|
||||
{
|
||||
$this->checkAuthorization(auth()->user(), ['cost.create']);
|
||||
$request->validate([
|
||||
'code' => 'required|unique:cost_centre,code',
|
||||
'name' => 'required|unique:cost_centre,name'
|
||||
@@ -38,6 +41,7 @@ class CostCentreController extends Controller
|
||||
|
||||
public function edit($id)
|
||||
{
|
||||
$this->checkAuthorization(auth()->user(), ['cost.edit']);
|
||||
return view('backend.pages.master.cost.edit', [
|
||||
'cost' => CostCentre::findOrfail($id)
|
||||
]);
|
||||
@@ -45,6 +49,7 @@ class CostCentreController extends Controller
|
||||
|
||||
public function update(Request $request, $id)
|
||||
{
|
||||
$this->checkAuthorization(auth()->user(), ['cost.edit']);
|
||||
$request->validate([
|
||||
'code' => 'required|unique:cost_centre,code,' . $id . ',id',
|
||||
'name' => 'required|unique:cost_centre,name,' . $id . ',id'
|
||||
@@ -61,6 +66,7 @@ class CostCentreController extends Controller
|
||||
|
||||
public function destroy($id)
|
||||
{
|
||||
$this->checkAuthorization(auth()->user(), ['cost.delete']);
|
||||
CostCentre::findOrfail($id)->delete();
|
||||
|
||||
session()->flash('success', 'Cost has been deleted.');
|
||||
|
||||
Reference in New Issue
Block a user