security: expand and complete permissions matrix with granular, enterprise-ready permissions

This commit is contained in:
2026-05-21 22:15:53 +07:00
parent 65804be1cb
commit 7965b34c85
44 changed files with 179 additions and 145 deletions
@@ -12,7 +12,7 @@ class NotificationController extends Controller
{
public function index(Request $request)
{
abort_if(!auth()->user()->can('role.manage'), 403, 'Unauthorized. Role management permission required.');
abort_if(!auth()->user()->can('notifications.view'), 403, 'Unauthorized. Notification view permission required.');
$logs = NotificationLog::with(['targetUser', 'sender'])
->latest()
@@ -39,7 +39,7 @@ class NotificationController extends Controller
public function store(Request $request)
{
abort_if(!auth()->user()->can('role.manage'), 403, 'Unauthorized. Role management permission required.');
abort_if(!auth()->user()->can('notifications.send'), 403, 'Unauthorized. Notification send permission required.');
$validated = $request->validate([
'title' => 'required|string|max:255',