diff --git a/app/Classes/Modules/Questionnaires/ControllersLogic/FetchAdminWFPendingApprovalPOLogic.php b/app/Classes/Modules/Questionnaires/ControllersLogic/FetchAdminWFPendingApprovalPOLogic.php index 94d4f07a..649e727c 100644 --- a/app/Classes/Modules/Questionnaires/ControllersLogic/FetchAdminWFPendingApprovalPOLogic.php +++ b/app/Classes/Modules/Questionnaires/ControllersLogic/FetchAdminWFPendingApprovalPOLogic.php @@ -31,7 +31,7 @@ class FetchAdminWFPendingApprovalPOLogic extends AbstractControllerLogic ]; } - /** @var CanFetchQuestion */ //cief todo: permission update + /** @var CanFetchQuestion */ private $canFetchQuestion; /** @var FetchesBooking */ diff --git a/app/Classes/Modules/Questionnaires/ControllersLogic/FetchAdminWFPendingFillPOLogic.php b/app/Classes/Modules/Questionnaires/ControllersLogic/FetchAdminWFPendingFillPOLogic.php index 7687a2ff..29423c50 100644 --- a/app/Classes/Modules/Questionnaires/ControllersLogic/FetchAdminWFPendingFillPOLogic.php +++ b/app/Classes/Modules/Questionnaires/ControllersLogic/FetchAdminWFPendingFillPOLogic.php @@ -29,7 +29,7 @@ class FetchAdminWFPendingFillPOLogic extends AbstractControllerLogic ]; } - /** @var CanFetchQuestion */ //cief todo: 74 - permission update + /** @var CanFetchQuestion */ private $canFetchQuestion; /** @var FetchesBooking */ diff --git a/app/Classes/Modules/Questionnaires/Standards/Rules/CanFetchQuestion.php b/app/Classes/Modules/Questionnaires/Standards/Rules/CanFetchQuestion.php index de9b3989..65e46e26 100644 --- a/app/Classes/Modules/Questionnaires/Standards/Rules/CanFetchQuestion.php +++ b/app/Classes/Modules/Questionnaires/Standards/Rules/CanFetchQuestion.php @@ -4,6 +4,7 @@ namespace App\Classes\Modules\Questionnaires\Standards\Rules; use App\Classes\General\Abstracts\AbstractRule; +use App\Classes\ValueObjects\Constants\RoleTypes; class CanFetchQuestion extends AbstractRule { @@ -13,8 +14,12 @@ class CanFetchQuestion extends AbstractRule */ protected function authorized($object): bool { - // TODO Set Authorization rules - return true; + $roleToCheck = Auth()->user()->type; + if (in_array($roleToCheck, RoleTypes::ADMIN_ROLES)) { + return true; + } else { + return false; + } } /**