admin/HRM-System
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix HR users with employee type bypassing branch view in Attendance Records

Browse Source
This commit is contained in:
admin
2026-07-06 13:49:05 +08:00
parent a3903ffe34
commit 82d5592aec
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/Http/Controllers/AttendanceRecordController.php
View File

@@ -25,7 +25,8 @@ class AttendanceRecordController extends Controller
$user = Auth::user();
// Employee self-service: redirect to calendar but pass their own records only
if ($user->type === 'employee' || $request->has('my_attendance')) {
$isStrictlyEmployee = $user->type === 'employee' && !$user->can('manage-attendance-records');
if ($isStrictlyEmployee || $request->has('my_attendance')) {
// For employees, show only their own attendance in calendar view
if (!$request->routeIs('hr.attendance-records.calendar')) {
return redirect()->route('hr.attendance-records.calendar', array_merge($request->all(), ['my_attendance' => 1]));
@@ -958,7 +959,8 @@ class AttendanceRecordController extends Controller
$user = Auth::user();
// Employee self-service: show only their own calendar
if ($user->type === 'employee' || $request->has('my_attendance')) {
$isStrictlyEmployee = $user->type === 'employee' && !$user->can('manage-attendance-records');
if ($isStrictlyEmployee || $request->has('my_attendance')) {
$month = $request->input('month', date('n'));
$year = $request->input('year', date('Y'));