security: expand and complete permissions matrix with granular, enterprise-ready permissions

This commit is contained in:
2026-05-21 22:15:53 +07:00
parent 65804be1cb
commit 7965b34c85
44 changed files with 179 additions and 145 deletions
+2 -2
View File
@@ -68,7 +68,7 @@ class RoleController extends Controller
*/
public function store(Request $request)
{
abort_if(!auth()->user()->can('role.manage'), 403, 'Unauthorized. Role management permission required.');
abort_if(!auth()->user()->can('role.create'), 403, 'Unauthorized. Role creation permission required.');
$validated = $request->validate([
'name' => 'required|string|max:50|unique:roles,name',
@@ -87,7 +87,7 @@ class RoleController extends Controller
*/
public function destroy(Role $role)
{
abort_if(!auth()->user()->can('role.manage'), 403, 'Unauthorized. Role management permission required.');
abort_if(!auth()->user()->can('role.delete'), 403, 'Unauthorized. Role deletion permission required.');
if ($role->name === 'super-admin') {
return back()->withErrors(['error' => 'Cannot delete the super-admin role.']);