admin/HRM-System
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: simplify leave applications UI and endpoint access for employee role

Browse Source
This commit is contained in:
admin
2026-06-30 16:10:48 +08:00
parent 96c7e7cd63
commit 5a95cdf4ef
416 changed files with 14580 additions and 14542 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
app/Http/Controllers/LeaveApplicationController.php
View File

@@ -169,6 +169,15 @@ class LeaveApplicationController extends Controller
public function store(Request $request)
{
$user = Auth::user();
if ($user->type === 'employee') {
$request->merge(['employee_id' => $user->id]);
} else {
if (!$user->can('create-leave-applications')) {
return redirect()->back()->with('error', __('Permission Denied.'));
}
}
$validated = $request->validate([
'employee_id' => 'required|exists:users,id',
'leave_type_id' => 'required|exists:leave_types,id',
@@ -264,6 +273,18 @@ class LeaveApplicationController extends Controller
->first();
if ($leaveApplication) {
$user = Auth::user();
if ($user->type === 'employee') {
if ($leaveApplication->employee_id !== $user->id) {
return redirect()->back()->with('error', __('Permission Denied.'));
}
$request->merge(['employee_id' => $user->id]);
} else {
if (!$user->can('edit-leave-applications')) {
return redirect()->back()->with('error', __('Permission Denied.'));
}
}
try {
$validated = $request->validate([
'employee_id' => 'required|exists:users,id',
@@ -314,6 +335,17 @@ class LeaveApplicationController extends Controller
->first();
if ($leaveApplication) {
$user = Auth::user();
if ($user->type === 'employee') {
if ($leaveApplication->employee_id !== $user->id) {
return redirect()->back()->with('error', __('Permission Denied.'));
}
} else {
if (!$user->can('delete-leave-applications')) {
return redirect()->back()->with('error', __('Permission Denied.'));
}
}
try {
$leaveApplication->delete();