admin/GSB-Construction
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: implement initial project, document, and resource management modules with routing, controllers, and UI components

Browse Source
This commit is contained in:
Ajjj
2026-08-05 03:26:06 +08:00
parent c03de704e2
commit 80fa96097c
16 changed files with 718 additions and 320 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
Modules/UserManagement/app/Http/Controllers/UserController.php
View File

@@ -21,6 +21,14 @@ class UserController extends Controller
public function index(Request $request): Response
{
$query = User::with(['roles', 'employeeProfile', 'customerProfile', 'contractor']);
// Super Admin and platform admin roles are never restricted by a legacy
// contractor link on their account.
$authUser = $request->user();
$isPlatformAdmin = $authUser && $authUser->hasAnyRole(['Super Admin', 'admin']);
if ($authUser && ! $isPlatformAdmin && ! is_null($authUser->contractor_id)) {
$query->where('contractor_id', $authUser->contractor_id);
}
if ($request->filled('search')) {
$search = $request->search;
@@ -448,6 +456,10 @@ class UserController extends Controller
{
$authUser = auth()->user();
if ($authUser->hasAnyRole(['Super Admin', 'admin'])) {
return;
}
if (! is_null($authUser->contractor_id) && $user->contractor_id !== $authUser->contractor_id) {
abort(redirect()->route('users.index')->with('error', 'You do not have permission to access this user.'));
}