mirror of
https://git.meshkee.com/cssd/cssd-back.git
synced 2026-10-10 19:51:07 +03:30
new correction
This commit is contained in:
@@ -12,13 +12,15 @@ class ItemController extends Controller
|
||||
public function index(Request $request)
|
||||
{
|
||||
$user = auth('api')->user();
|
||||
$admin_users = User::role('Admin')->get()->pluck('id')->toArray();
|
||||
$admin_users[] = $user->id;
|
||||
|
||||
$Items = Item::when($user->cant('showAll'), function($query) use ($user, $admin_users) {
|
||||
if ($user->hasRole('Supervisor|User')) {
|
||||
$query->whereHas('user', function($query) use ($user, $admin_users) {
|
||||
$query->where('medical_center_id', $user->medical_center_id)->orWhereIn('id', $admin_users);
|
||||
if ($user->hasRole('User')) {
|
||||
return \MessageResponse::error('You dont have access to this section!');
|
||||
}
|
||||
|
||||
$Items = Item::when($user->cant('showAll'), function($query) use ($user) {
|
||||
if ($user->hasRole('Supervisor')) {
|
||||
$query->whereHas('user', function($query) use ($user) {
|
||||
$query->where('medical_center_id', $user->medical_center_id);
|
||||
});
|
||||
}
|
||||
})
|
||||
@@ -102,17 +104,19 @@ class ItemController extends Controller
|
||||
public function getItems(){
|
||||
|
||||
$user = auth('api')->user();
|
||||
$admin_users = User::role('Admin')->get()->pluck('id')->toArray();
|
||||
$admin_users[] = $user->id;
|
||||
|
||||
$Items = Item::when($user->cant('showAll'), function($query) use ($user, $admin_users) {
|
||||
if ($user->hasRole('Supervisor|User')) {
|
||||
$query->whereHas('user', function($query) use ($user, $admin_users) {
|
||||
$query->where('medical_center_id', $user->medical_center_id)->orWhereIn('id', $admin_users);
|
||||
if ($user->hasRole('User')) {
|
||||
return \MessageResponse::data([]);
|
||||
}
|
||||
|
||||
$Items = Item::when($user->cant('showAll'), function($query) use ($user) {
|
||||
if ($user->hasRole('Supervisor')) {
|
||||
$query->whereHas('user', function($query) use ($user) {
|
||||
$query->where('medical_center_id', $user->medical_center_id);
|
||||
});
|
||||
}
|
||||
})
|
||||
->with(['user' => function($query){
|
||||
->with(['user' => function($query){
|
||||
$query->select('id', 'name', 'medical_center_id');
|
||||
},
|
||||
'user.medical_center' => function($query){
|
||||
|
||||
Reference in New Issue
Block a user