security: expand and complete permissions matrix with granular, enterprise-ready permissions

This commit is contained in:
2026-05-21 22:15:53 +07:00
parent 65804be1cb
commit 7965b34c85
44 changed files with 179 additions and 145 deletions
+3 -3
View File
@@ -38,8 +38,8 @@ Route::middleware(['auth', 'verified'])->group(function () {
// Settings page
Route::get('/settings', [SettingsController::class, 'index'])->name('settings.index');
// System Settings (Super-Admin / settings.manage)
Route::middleware('can:settings.manage')->group(function () {
// System Settings (Super-Admin / settings.view)
Route::middleware('can:settings.view')->group(function () {
Route::get('/system-settings', [\App\Http\Controllers\SystemSettingController::class, 'index'])->name('system.settings.index');
Route::patch('/system-settings', [\App\Http\Controllers\SystemSettingController::class, 'update'])->name('system.settings.update');
Route::post('/system-settings/test-email', [\App\Http\Controllers\SystemSettingController::class, 'testEmail'])->name('system.settings.test-email');
@@ -71,7 +71,7 @@ Route::middleware(['auth', 'verified'])->group(function () {
// Internal Docs
Route::get('/documentation', fn() => Inertia::render('Docs/Index'))
->middleware('can:settings.manage')
->middleware('can:documentation.view')
->name('docs.index');
// Two-Factor Authentication