security: expand and complete permissions matrix with granular, enterprise-ready permissions
This commit is contained in:
@@ -181,7 +181,7 @@ class UserController extends Controller
|
||||
|
||||
public function bulkArchive(Request $request)
|
||||
{
|
||||
$this->authorize('user.delete');
|
||||
abort_if(!auth()->user()->can('user.delete'), 403, 'Unauthorized. User delete permission required.');
|
||||
|
||||
$ids = array_filter(
|
||||
(array) $request->input('ids', []),
|
||||
@@ -195,7 +195,7 @@ class UserController extends Controller
|
||||
|
||||
public function bulkRestore(Request $request)
|
||||
{
|
||||
$this->authorize('user.delete');
|
||||
abort_if(!auth()->user()->can('user.restore'), 403, 'Unauthorized. User restore permission required.');
|
||||
|
||||
$ids = (array) $request->input('ids', []);
|
||||
|
||||
@@ -206,7 +206,7 @@ class UserController extends Controller
|
||||
|
||||
public function bulkForceDelete(Request $request)
|
||||
{
|
||||
$this->authorize('user.delete');
|
||||
abort_if(!auth()->user()->can('user.force-delete'), 403, 'Unauthorized. User permanent deletion permission required.');
|
||||
|
||||
$ids = array_filter(
|
||||
(array) $request->input('ids', []),
|
||||
|
||||
Reference in New Issue
Block a user