mirror of
https://gitlab.com/CIEFWorldwideSdnBhd/izyim-api.git
synced 2026-08-22 05:54:18 +00:00
add security check for user
This commit is contained in:
@@ -5,15 +5,23 @@ namespace App\Http\Controllers;
|
||||
use Illuminate\Http\Request;
|
||||
use App\So;
|
||||
use App\Soitem;
|
||||
use App\company;
|
||||
use App\Company;
|
||||
use Auth;
|
||||
|
||||
class SoController extends Controller
|
||||
{
|
||||
|
||||
public function showso($id)
|
||||
public function show($id)
|
||||
{
|
||||
$sos = So::where('com_id', Auth::user()->company())->get();
|
||||
|
||||
if (!$sos)
|
||||
{
|
||||
return response()->json(['message'=>'Access Denied!'], 404);
|
||||
}
|
||||
|
||||
$so = So::findOrFail($id);
|
||||
|
||||
return view('home')->with('so', $so);
|
||||
}
|
||||
|
||||
@@ -74,7 +82,7 @@ class SoController extends Controller
|
||||
*/
|
||||
public function cancelOrder(Request $request)
|
||||
{
|
||||
|
||||
|
||||
if (!$so = So::where('com_id', Auth::user()->company())->where('id', $id)->first())
|
||||
{
|
||||
return response()->json(['message'=>'Access denied'], 200);
|
||||
|
||||
Reference in New Issue
Block a user