security: expand and complete permissions matrix with granular, enterprise-ready permissions
This commit is contained in:
@@ -12,7 +12,7 @@ class NotificationController extends Controller
|
||||
{
|
||||
public function index(Request $request)
|
||||
{
|
||||
abort_if(!auth()->user()->can('role.manage'), 403, 'Unauthorized. Role management permission required.');
|
||||
abort_if(!auth()->user()->can('notifications.view'), 403, 'Unauthorized. Notification view permission required.');
|
||||
|
||||
$logs = NotificationLog::with(['targetUser', 'sender'])
|
||||
->latest()
|
||||
@@ -39,7 +39,7 @@ class NotificationController extends Controller
|
||||
|
||||
public function store(Request $request)
|
||||
{
|
||||
abort_if(!auth()->user()->can('role.manage'), 403, 'Unauthorized. Role management permission required.');
|
||||
abort_if(!auth()->user()->can('notifications.send'), 403, 'Unauthorized. Notification send permission required.');
|
||||
|
||||
$validated = $request->validate([
|
||||
'title' => 'required|string|max:255',
|
||||
|
||||
Reference in New Issue
Block a user