security: expand and complete permissions matrix with granular, enterprise-ready permissions

This commit is contained in:
2026-05-21 22:15:53 +07:00
parent 65804be1cb
commit 7965b34c85
44 changed files with 179 additions and 145 deletions
+3 -3
View File
@@ -181,7 +181,7 @@ class UserController extends Controller
public function bulkArchive(Request $request)
{
$this->authorize('user.delete');
abort_if(!auth()->user()->can('user.delete'), 403, 'Unauthorized. User delete permission required.');
$ids = array_filter(
(array) $request->input('ids', []),
@@ -195,7 +195,7 @@ class UserController extends Controller
public function bulkRestore(Request $request)
{
$this->authorize('user.delete');
abort_if(!auth()->user()->can('user.restore'), 403, 'Unauthorized. User restore permission required.');
$ids = (array) $request->input('ids', []);
@@ -206,7 +206,7 @@ class UserController extends Controller
public function bulkForceDelete(Request $request)
{
$this->authorize('user.delete');
abort_if(!auth()->user()->can('user.force-delete'), 403, 'Unauthorized. User permanent deletion permission required.');
$ids = array_filter(
(array) $request->input('ids', []),