cssd-doc/cssd-back
1
0
Fork 0
mirror of https://git.meshkee.com/cssd/cssd-back.git synced 2026-10-13 10:41:06 +03:30
Code Issues Packages Projects Releases Wiki Activity

update verify access for test result

Browse Source
This commit is contained in:
Fateme
2020-07-23 23:05:18 +04:30
parent 73d0169ca3
commit 4ce1a6a379
6 changed files with 15 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Http/Controllers/TestResultController.php
+3 -6
View File
@@ -374,16 +374,13 @@ class TestResultController extends Controller
return \MessageResponse::success(null, trans('messages.success'));
}
public function verifyTestResult(TestResult $TestResult)
public function verifyTestResult(TestResult $TestResult, $Value)
{
if (auth('api')->user()->cant('verifyTestResult', $TestResult)) {
return \MessageResponse::error(trans('You dont have permission or this test result belongs to another medical center'));
}
if ($TestResult->verified == 'Verified') {
$TestResult->verified = 'NotVerified';
} else {
$TestResult->verified = 'Verified';
}
$TestResult->verified = $Value;
$TestResult->save();
$TestResult = $TestResult->load('user.medical_center');
return \MessageResponse::success(trans('messages.success'), null, $TestResult);
app/Policies/TestResultPolicy.php
+1 -1
View File
@@ -30,7 +30,7 @@ class TestResultPolicy
$TR_MID = $TestResult->user->medical_center_id;
$User_MID = $User->medical_center_id;
if($User->hasRole('Admin') || ( $User->hasRole('Supervisor') && $TR_MID == $User_MID))
if($User->hasRole('Admin') || ( $User->hasRole('Supervisor') && $TR_MID == $User_MID && $TestResult->verified == 'None'))
return true;
}
}