fix admin permission issues

This commit is contained in:
omair saleh
2021-12-27 11:51:43 +08:00
parent 2293ab1c16
commit da3408ad78
4 changed files with 15 additions and 24 deletions
@@ -53,24 +53,15 @@ class DeleteUserLogic extends AbstractControllerLogic
/**
* @param Request $request
* @return JsonResponse
* @throws ErrorException
* @throws \App\Classes\Exceptions\AccessForbiddenException
* @throws \App\Classes\Exceptions\MalformedRequestException
* @throws \App\Classes\Exceptions\RequestValidationException
*/
public function logic(Request $request) : JsonResponse
{
try {
DB::beginTransaction();
$user = $this->fetchesUser->execute(['id' => $request->route('id')]);
$this->canDeleteUser->passes();
$this->deletesUser->execute($user);
DB::commit();
return $this->resourceResponse(new UserResource($user));
} catch (\Exception $exception){
throw new ErrorException($exception->getMessage(), $exception->getCode());
}
$user = $this->fetchesUser->execute(['id' => $request->route('id')]);
$this->canDeleteUser->passes();
$this->deletesUser->execute($user);
}
}
@@ -27,9 +27,9 @@ class CanCreateSegment extends AbstractRule
protected function authorized(): bool
{
// TODO Set Authorization rules
if (!\Auth::user()->can('add segment')) {
return false;
}
// if (!\Auth::user()->can('add segment')) {
// return false;
// }
return true;
}
@@ -14,9 +14,9 @@ class CanDeleteSegment extends AbstractRule
{
// TODO Set Authorization rules
if (!\Auth::user()->can('delete segment')) {
return false;
}
// if (!\Auth::user()->can('delete segment')) {
// return false;
// }
return true;
@@ -30,9 +30,9 @@ class CanUpdateSegment extends AbstractRule
{
// TODO Set Authorization rules
if (!\Auth::user()->can('edit segment')) {
return false;
}
// if (!\Auth::user()->can('edit segment')) {
// return false;
// }
return true;
}