izyim-api/app/Http/Controllers/ContactController.php

<?php

namespace App\Http\Controllers;

use App\Contact;
use App\Company;
use Illuminate\Http\Request;

class ContactController extends Controller
{
    /**
     * list the company that belongs to user's company only
     *
     * @param  int  $id
     * @return \Illuminate\Http\Response
     */ 
    public function index()
    {
        $contacts = Contact::where('user_id', Auth::user()->id)->where('id', $id)->first();

        if (!$contacts)
        {
            return response()->json(['message'=>'Access Denied!'], 404);
        }

        return response()->json($contacts, 200);
    }

    /**
     * Store a new contact list.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return \Illuminate\Http\Response
     */
    public function store(Request $request)
    {
        $user = Auth::user();
        
        // query to find company asisng to $company
        $company = Company::find($com_id);

        // get user from session
        $request->user();
        $user = $request->user();

        // prepare query
         $contact = new Contact();
         $contact->com_id = $company->id;
         $contact->user_id = $user->id;
         $contact->save();
 
        return response()->json($contact, 201);
    }

    /**
     * Approve a new contact list.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return \Illuminate\Http\Response
     */
    public function postApprove(Request $request, $id)
    {
        $contact = Contact::where('com_id', Auth::user()->company())->where('id', $id)->first();
        //$contact = Contact::where('id', '=', e($id))->first();
        if($contact)
        {
            $action=$request->input('action');
            if ($action==1)
            {
                $contact->status=1;
            }
            if ($action==0)
            {
                $contact->status=0;
            }
            else{
                
                return response()->json(["message" => "not allowed"], 400);
            }

            $saved = $contact->save();
            if ($saved){
                return response()->json($contact, 201);
            }
                return response()->json($contact, 400);

//            $contact = $request->input('id');
//            $contact->status = 1;
//            $contact->save();
           //return redirect()->back()->with('info','Request has been approved ');
        }
    }

    /**
     * Remove the contact list.
     *
     * @param  int  $id
     * @return \Illuminate\Http\Response
     */
    public function destroy($id)
    {
        $contact = Contact::where('com_id', Auth::user()->company())->where('id', $id)->first();

        if (!$contact)
        {
            return response()->json(['message'=>'Access Denied!'], 404);
        }

        $contact->delete($id);

        return response()->json($contact, 204);
    }
}