cssd-doc/cssd-back
1
0
Fork 0
mirror of https://git.meshkee.com/cssd/cssd-back.git synced 2026-10-10 19:51:07 +03:30
Code Issues Packages Projects Releases Wiki Activity

items that belongs to a package cannot be transferred.

Browse Source
This commit is contained in:
Moradi
2025-04-09 14:02:13 +03:30
parent 6311e2af70
commit f9023086c9
2 changed files with 14 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Http/Controllers/TransferItemController.php
+1 -1
View File
@@ -58,7 +58,7 @@ class TransferItemController extends Controller
public function transfer( StoreTransferRequest $request , Item $Item )
{
if ( auth( 'api' )->user()->cant( 'transferItem' , [ Transfer::class , $Item ] ) ) {
if ( auth( 'api' )->user()->cant( 'transferItem' , [ auth()->user() , $Item ] ) ) {
return MessageResponse::error( trans( 'messages.access_denied' ) );
}
if ( $Item->user_id != $request->user_id ) {
app/Policies/TransferPolicy.php
+13 -9
View File
@@ -17,18 +17,22 @@ class TransferPolicy
public function transferItem(User $user, Item $Item)
{
if ($user->hasRole('Admin')) {
return true;
} else {
if ($user->hasRole('Supervisor')) {
if ($Item->user->medical_center_id == $user->medical_center_id) {
return true;
}
if(is_null($Item->package_id)){
if ($user->hasRole('Admin')) {
return true;
} else {
if ($Item->user_id == $user->id) {
return true;
if ($user->hasRole('Supervisor')) {
if ($Item->user->medical_center_id == $user->medical_center_id) {
return true;
}
} else {
if ($Item->user_id == $user->id) {
return true;
}
}
}
} else {
return false;
}
}