security: expand and complete permissions matrix with granular, enterprise-ready permissions
This commit is contained in:
@@ -68,7 +68,7 @@ class RoleController extends Controller
|
||||
*/
|
||||
public function store(Request $request)
|
||||
{
|
||||
abort_if(!auth()->user()->can('role.manage'), 403, 'Unauthorized. Role management permission required.');
|
||||
abort_if(!auth()->user()->can('role.create'), 403, 'Unauthorized. Role creation permission required.');
|
||||
|
||||
$validated = $request->validate([
|
||||
'name' => 'required|string|max:50|unique:roles,name',
|
||||
@@ -87,7 +87,7 @@ class RoleController extends Controller
|
||||
*/
|
||||
public function destroy(Role $role)
|
||||
{
|
||||
abort_if(!auth()->user()->can('role.manage'), 403, 'Unauthorized. Role management permission required.');
|
||||
abort_if(!auth()->user()->can('role.delete'), 403, 'Unauthorized. Role deletion permission required.');
|
||||
|
||||
if ($role->name === 'super-admin') {
|
||||
return back()->withErrors(['error' => 'Cannot delete the super-admin role.']);
|
||||
|
||||
Reference in New Issue
Block a user