first commit

app/Http/Controllers/Admin/ApprovalController.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Models\Permohonan;
+
+class ApprovalController extends Controller
+{
+    public function index()
+    {
+        $permohonan = Permohonan::with(['user', 'jabatan', 'vot'])->latest()->paginate(10);
+        return view('reports.permohonan', compact('permohonan'));
+    }
+
+    public function approve(Permohonan $permohonan)
+    {
+        $permohonan->update(['status' => 'Approved', 'approved_by' => auth()->id(), 'approved_at' => now()]);
+        return back()->with('success', 'Permohonan diluluskan.');
+    }
+
+    public function reopen(Permohonan $permohonan)
+    {
+        $permohonan->update(['status' => 'Under Review', 'approved_by' => null, 'approved_at' => null]);
+        return back()->with('success', 'Permohonan dibuka semula.');
+    }
+}

app/Http/Controllers/Admin/JabatanController.php

@@ -0,0 +1,53 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Models\Jabatan;
+use Illuminate\Http\Request;
+
+class JabatanController extends Controller
+{
+    public function index(Request $request)
+    {
+        $jabatan = Jabatan::query()
+            ->when($request->search, fn ($q, $v) => $q->where('nama', 'like', "%$v%")->orWhere('kod', 'like', "%$v%"))
+            ->when($request->peringkat, fn ($q, $v) => $q->where('peringkat', $v))
+            ->latest()->paginate(10)->withQueryString();
+
+        return view('admin.jabatan.index', compact('jabatan'));
+    }
+
+    public function create() { return view('admin.jabatan.form', ['jabatan' => new Jabatan()]); }
+
+    public function store(Request $request)
+    {
+        Jabatan::create($this->validated($request));
+        return redirect()->route('jabatan.index')->with('success', 'Jabatan berjaya ditambah.');
+    }
+
+    public function edit(Jabatan $jabatan) { return view('admin.jabatan.form', compact('jabatan')); }
+
+    public function update(Request $request, Jabatan $jabatan)
+    {
+        $jabatan->update($this->validated($request, $jabatan->id));
+        return redirect()->route('jabatan.index')->with('success', 'Jabatan berjaya dikemaskini.');
+    }
+
+    public function destroy(Jabatan $jabatan)
+    {
+        $jabatan->delete();
+        return back()->with('success', 'Jabatan dipadam secara soft delete.');
+    }
+
+    private function validated(Request $request, ?int $id = null): array
+    {
+        return $request->validate([
+            'nama' => ['required', 'max:255'],
+            'peringkat' => ['required', 'in:Jabatan,Bahagian,Seksyen,Unit,Sub Unit'],
+            'kod' => ['nullable', 'max:50', 'unique:jabatan,kod,'.$id],
+            'penerangan' => ['nullable'],
+            'status' => ['nullable', 'boolean'],
+        ]) + ['status' => $request->boolean('status')];
+    }
+}

app/Http/Controllers/Admin/ReportController.php

@@ -0,0 +1,29 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Exports\PermohonanExport;
+use App\Http\Controllers\Controller;
+use App\Models\Permohonan;
+use Barryvdh\DomPDF\Facade\Pdf;
+use Maatwebsite\Excel\Facades\Excel;
+
+class ReportController extends Controller
+{
+    public function index()
+    {
+        $permohonan = Permohonan::with(['user', 'jabatan', 'vot'])->latest()->paginate(20);
+        return view('reports.index', compact('permohonan'));
+    }
+
+    public function excel()
+    {
+        return Excel::download(new PermohonanExport(), 'laporan-permohonan.xlsx');
+    }
+
+    public function pdf()
+    {
+        $permohonan = Permohonan::with(['user', 'jabatan', 'vot'])->latest()->get();
+        return Pdf::loadView('reports.pdf', compact('permohonan'))->download('laporan-permohonan.pdf');
+    }
+}

app/Http/Controllers/Admin/RoleController.php

@@ -0,0 +1,50 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Spatie\Permission\Models\Permission;
+use Spatie\Permission\Models\Role;
+
+class RoleController extends Controller
+{
+    public function index()
+    {
+        return view('admin.roles.index', ['roles' => Role::with('permissions')->paginate(10)]);
+    }
+
+    public function create()
+    {
+        return view('admin.roles.form', ['role' => new Role(), 'permissions' => Permission::orderBy('name')->get()]);
+    }
+
+    public function store(Request $request)
+    {
+        $validated = $request->validate(['name' => ['required', 'unique:roles,name'], 'permissions' => ['array']]);
+        $role = Role::create(['name' => $validated['name'], 'guard_name' => 'web']);
+        $role->syncPermissions($validated['permissions'] ?? []);
+
+        return redirect()->route('roles.index')->with('success', 'Role berjaya ditambah.');
+    }
+
+    public function edit(Role $role)
+    {
+        return view('admin.roles.form', ['role' => $role, 'permissions' => Permission::orderBy('name')->get()]);
+    }
+
+    public function update(Request $request, Role $role)
+    {
+        $validated = $request->validate(['name' => ['required', 'unique:roles,name,'.$role->id], 'permissions' => ['array']]);
+        $role->update(['name' => $validated['name']]);
+        $role->syncPermissions($validated['permissions'] ?? []);
+
+        return redirect()->route('roles.index')->with('success', 'Role berjaya dikemaskini.');
+    }
+
+    public function destroy(Role $role)
+    {
+        $role->delete();
+        return back()->with('success', 'Role berjaya dipadam.');
+    }
+}

app/Http/Controllers/Admin/UserController.php

@@ -0,0 +1,95 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Models\Jabatan;
+use App\Models\User;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Spatie\Permission\Models\Role;
+
+class UserController extends Controller
+{
+    public function index(Request $request)
+    {
+        $users = User::with(['jabatan', 'roles'])
+            ->when($request->search, fn ($q, $v) => $q->where('name', 'like', "%$v%")->orWhere('email', 'like', "%$v%"))
+            ->latest()->paginate(10)->withQueryString();
+
+        return view('admin.users.index', compact('users'));
+    }
+
+    public function create()
+    {
+        return view('admin.users.form', $this->formData(new User()));
+    }
+
+    public function store(Request $request)
+    {
+        $validated = $this->validated($request);
+        $role = $validated['role'] ?? null;
+        unset($validated['role']);
+        $validated['password'] = Hash::make($validated['password']);
+        $user = User::create($validated);
+        $user->syncRoles($role ? [$role] : []);
+
+        return redirect()->route('users.index')->with('success', 'User berjaya ditambah.');
+    }
+
+    public function edit(User $user)
+    {
+        return view('admin.users.form', $this->formData($user));
+    }
+
+    public function update(Request $request, User $user)
+    {
+        $validated = $this->validated($request, $user->id);
+        $role = $validated['role'] ?? null;
+        unset($validated['role']);
+        if (empty($validated['password'])) {
+            unset($validated['password']);
+        } else {
+            $validated['password'] = Hash::make($validated['password']);
+        }
+        $user->update($validated);
+        $user->syncRoles($role ? [$role] : []);
+
+        return redirect()->route('users.index')->with('success', 'User berjaya dikemaskini.');
+    }
+
+    public function destroy(User $user)
+    {
+        $user->update(['status' => ! $user->status]);
+        return back()->with('success', 'Status user berjaya dikemaskini.');
+    }
+
+    public function resetPassword(User $user)
+    {
+        $user->update(['password' => Hash::make('password')]);
+        return back()->with('success', 'Kata laluan diset semula kepada: password');
+    }
+
+    private function formData(User $user): array
+    {
+        return [
+            'user' => $user,
+            'jabatan' => Jabatan::orderBy('nama')->get(),
+            'roles' => Role::orderBy('name')->get(),
+        ];
+    }
+
+    private function validated(Request $request, ?int $id = null): array
+    {
+        return $request->validate([
+            'name' => ['required', 'max:255'],
+            'email' => ['required', 'email', 'unique:users,email,'.$id],
+            'no_telefon' => ['nullable', 'max:30'],
+            'jawatan' => ['nullable', 'max:255'],
+            'jabatan_id' => ['nullable', 'exists:jabatan,id'],
+            'role' => ['nullable', 'exists:roles,name'],
+            'password' => [$id ? 'nullable' : 'required', 'confirmed', 'min:8'],
+            'status' => ['nullable', 'boolean'],
+        ]) + ['status' => $request->boolean('status')];
+    }
+}

app/Http/Controllers/Admin/VotController.php

@@ -0,0 +1,55 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Models\Jabatan;
+use App\Models\Vot;
+use Illuminate\Http\Request;
+
+class VotController extends Controller
+{
+    public function index(Request $request)
+    {
+        $vot = Vot::with('jabatan')
+            ->when($request->search, fn ($q, $v) => $q->where('nama', 'like', "%$v%")->orWhere('kod', 'like', "%$v%"))
+            ->when($request->jabatan_id, fn ($q, $v) => $q->where('jabatan_id', $v))
+            ->latest()->paginate(10)->withQueryString();
+        $jabatan = Jabatan::orderBy('nama')->get();
+
+        return view('admin.vot.index', compact('vot', 'jabatan'));
+    }
+
+    public function create() { return view('admin.vot.form', ['vot' => new Vot(), 'jabatan' => Jabatan::orderBy('nama')->get()]); }
+
+    public function store(Request $request)
+    {
+        Vot::create($this->validated($request));
+        return redirect()->route('vot.index')->with('success', 'VOT berjaya ditambah.');
+    }
+
+    public function edit(Vot $vot) { return view('admin.vot.form', ['vot' => $vot, 'jabatan' => Jabatan::orderBy('nama')->get()]); }
+
+    public function update(Request $request, Vot $vot)
+    {
+        $vot->update($this->validated($request, $vot->id));
+        return redirect()->route('vot.index')->with('success', 'VOT berjaya dikemaskini.');
+    }
+
+    public function destroy(Vot $vot)
+    {
+        $vot->delete();
+        return back()->with('success', 'VOT berjaya dipadam.');
+    }
+
+    private function validated(Request $request, ?int $id = null): array
+    {
+        return $request->validate([
+            'kod' => ['required', 'max:50', 'unique:vot,kod,'.$id],
+            'nama' => ['required', 'max:255'],
+            'jabatan_id' => ['nullable', 'exists:jabatan,id'],
+            'penerangan' => ['nullable'],
+            'status' => ['nullable', 'boolean'],
+        ]) + ['status' => $request->boolean('status')];
+    }
+}

app/Http/Controllers/Auth/ForgotPasswordController.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Password;
+
+class ForgotPasswordController extends Controller
+{
+    public function create()
+    {
+        return view('auth.forgot-password');
+    }
+
+    public function store(Request $request)
+    {
+        $request->validate(['email' => ['required', 'email']]);
+        $status = Password::sendResetLink($request->only('email'));
+
+        return $status === Password::RESET_LINK_SENT
+            ? back()->with('success', __($status))
+            : back()->withErrors(['email' => __($status)]);
+    }
+}

app/Http/Controllers/Auth/LoginController.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+
+class LoginController extends Controller
+{
+    public function create()
+    {
+        return view('auth.login');
+    }
+
+    public function store(Request $request)
+    {
+        $credentials = $request->validate([
+            'email' => ['required', 'email'],
+            'password' => ['required'],
+        ]);
+
+        if (Auth::attempt($credentials, $request->boolean('remember'))) {
+            $request->session()->regenerate();
+            $request->user()->update(['last_login_at' => now()]);
+            activity('auth')->causedBy($request->user())->withProperties([
+                'ip_address' => $request->ip(),
+                'browser' => $request->userAgent(),
+            ])->log('Login User');
+
+            return redirect()->intended(route('dashboard'));
+        }
+
+        return back()->withErrors(['email' => 'Maklumat log masuk tidak sah.'])->onlyInput('email');
+    }
+
+    public function destroy(Request $request)
+    {
+        $user = $request->user();
+        activity('auth')->causedBy($user)->log('Logout User');
+        Auth::logout();
+        $request->session()->invalidate();
+        $request->session()->regenerateToken();
+
+        return redirect()->route('login');
+    }
+}

app/Http/Controllers/Auth/PasswordController.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+
+class PasswordController extends Controller
+{
+    public function edit()
+    {
+        return view('auth.change-password');
+    }
+
+    public function update(Request $request)
+    {
+        $validated = $request->validate([
+            'current_password' => ['required', 'current_password'],
+            'password' => ['required', 'confirmed', 'min:8'],
+        ]);
+
+        $request->user()->update(['password' => Hash::make($validated['password'])]);
+
+        return back()->with('success', 'Kata laluan berjaya dikemaskini.');
+    }
+}

app/Http/Controllers/Auth/ResetPasswordController.php

@@ -0,0 +1,34 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Support\Facades\Password;
+use Illuminate\Support\Str;
+
+class ResetPasswordController extends Controller
+{
+    public function create(Request $request, string $token)
+    {
+        return view('auth.reset-password', ['token' => $token, 'email' => $request->email]);
+    }
+
+    public function store(Request $request)
+    {
+        $request->validate([
+            'token' => ['required'],
+            'email' => ['required', 'email'],
+            'password' => ['required', 'confirmed', 'min:8'],
+        ]);
+
+        $status = Password::reset($request->only('email', 'password', 'password_confirmation', 'token'), function ($user, $password) {
+            $user->forceFill(['password' => Hash::make($password), 'remember_token' => Str::random(60)])->save();
+        });
+
+        return $status === Password::PASSWORD_RESET
+            ? redirect()->route('login')->with('success', __($status))
+            : back()->withErrors(['email' => __($status)]);
+    }
+}

app/Http/Controllers/Controller.php

@@ -0,0 +1,8 @@
+<?php
+
+namespace App\Http\Controllers;
+
+abstract class Controller
+{
+    //
+}

app/Http/Controllers/DashboardController.php

@@ -0,0 +1,34 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\Jabatan;
+use App\Models\Permohonan;
+use App\Models\Vot;
+use Spatie\Activitylog\Models\Activity;
+
+class DashboardController extends Controller
+{
+    public function __invoke()
+    {
+        $user = auth()->user();
+        $base = Permohonan::query();
+
+        if ($user->hasRole('Pemohon')) {
+            $base->where('user_id', $user->id);
+        } elseif ($user->hasRole('Pelaksana')) {
+            $base->where('jabatan_id', $user->jabatan_id);
+        }
+
+        return view('dashboard.index', [
+            'total' => (clone $base)->count(),
+            'approved' => (clone $base)->where('status', 'Approved')->sum('jumlah_keseluruhan'),
+            'rejected' => (clone $base)->where('status', 'Rejected')->count(),
+            'pending' => (clone $base)->whereIn('status', ['Submitted', 'Under Review'])->count(),
+            'byJabatan' => Jabatan::withCount('users')->limit(8)->get(),
+            'byVot' => Vot::with('jabatan')->limit(8)->get(),
+            'recent' => (clone $base)->latest()->with(['user', 'jabatan', 'vot'])->limit(6)->get(),
+            'activities' => Activity::latest()->limit(8)->get(),
+        ]);
+    }
+}

app/Http/Controllers/Pelaksana/SemakanController.php

@@ -0,0 +1,51 @@
+<?php
+
+namespace App\Http\Controllers\Pelaksana;
+
+use App\Http\Controllers\Controller;
+use App\Models\Permohonan;
+use Illuminate\Http\Request;
+
+class SemakanController extends Controller
+{
+    public function index()
+    {
+        $permohonan = Permohonan::with(['user', 'jabatan', 'vot'])
+            ->where('jabatan_id', auth()->user()->jabatan_id)
+            ->whereIn('status', ['Submitted', 'Under Review', 'Accepted', 'Rejected'])
+            ->latest()->paginate(10);
+
+        return view('pelaksana.index', compact('permohonan'));
+    }
+
+    public function show(Permohonan $permohonan)
+    {
+        abort_unless($permohonan->jabatan_id === auth()->user()->jabatan_id || auth()->user()->hasRole('Admin'), 403);
+        return view('pelaksana.show', ['permohonan' => $permohonan->load(['items', 'user', 'jabatan', 'vot'])]);
+    }
+
+    public function update(Request $request, Permohonan $permohonan)
+    {
+        $validated = $request->validate([
+            'items' => ['required', 'array'],
+            'items.*.status_item' => ['required', 'in:Pending,Accepted,Rejected,Partial Accept'],
+            'items.*.catatan_pelaksana' => ['nullable'],
+            'catatan_semakan' => ['nullable'],
+        ]);
+
+        foreach ($validated['items'] as $id => $row) {
+            $permohonan->items()->whereKey($id)->update($row);
+        }
+
+        $hasReject = $permohonan->items()->where('status_item', 'Rejected')->exists();
+        $permohonan->update([
+            'status' => $hasReject ? 'Rejected' : 'Accepted',
+            'status_semakan' => 'Selesai',
+            'catatan_semakan' => $validated['catatan_semakan'] ?? null,
+            'reviewed_by' => auth()->id(),
+            'reviewed_at' => now(),
+        ]);
+
+        return redirect()->route('semakan.index')->with('success', 'Semakan berjaya dihantar kepada Admin.');
+    }
+}

app/Http/Controllers/Pemohon/PermohonanController.php

@@ -0,0 +1,93 @@
+<?php
+
+namespace App\Http\Controllers\Pemohon;
+
+use App\Http\Controllers\Controller;
+use App\Models\Permohonan;
+use App\Models\Vot;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Storage;
+
+class PermohonanController extends Controller
+{
+    public function index()
+    {
+        $permohonan = Permohonan::with(['vot', 'jabatan'])->where('user_id', auth()->id())->latest()->paginate(10);
+        return view('permohonan.index', compact('permohonan'));
+    }
+
+    public function create()
+    {
+        return view('permohonan.form', ['permohonan' => new Permohonan(), 'vot' => Vot::with('jabatan')->where('status', true)->get()]);
+    }
+
+    public function store(Request $request)
+    {
+        $validated = $this->validated($request);
+
+        DB::transaction(function () use ($request, $validated) {
+            $vot = Vot::findOrFail($validated['vot_id']);
+            $permohonan = Permohonan::create([
+                'no_rujukan' => 'MBIP/BJT/'.now()->format('YmdHis').'/'.auth()->id(),
+                'user_id' => auth()->id(),
+                'jabatan_id' => auth()->user()->jabatan_id ?: $vot->jabatan_id,
+                'vot_id' => $vot->id,
+                'kategori' => $validated['kategori'],
+                'tujuan' => $validated['tujuan'],
+                'status' => $request->input('action') === 'submit' ? 'Submitted' : 'Draft',
+                'submitted_at' => $request->input('action') === 'submit' ? now() : null,
+                'gambar_1' => $this->storeImage($request, 'gambar_1'),
+                'gambar_2' => $this->storeImage($request, 'gambar_2'),
+            ]);
+
+            $total = 0;
+            foreach ($validated['items'] as $row) {
+                $jumlah = $row['kuantiti'] * $row['harga_anggaran'];
+                $total += $jumlah;
+                $permohonan->items()->create($row + ['jumlah' => $jumlah]);
+            }
+            $permohonan->update(['jumlah_keseluruhan' => $total]);
+        });
+
+        return redirect()->route('permohonan.index')->with('success', 'Permohonan berjaya disimpan.');
+    }
+
+    public function show(Permohonan $permohonan)
+    {
+        $this->authorizeOwner($permohonan);
+        return view('permohonan.show', ['permohonan' => $permohonan->load(['items', 'vot', 'jabatan', 'user'])]);
+    }
+
+    public function submit(Permohonan $permohonan)
+    {
+        $this->authorizeOwner($permohonan);
+        $permohonan->update(['status' => 'Submitted', 'submitted_at' => now()]);
+        return back()->with('success', 'Permohonan dihantar kepada Pelaksana.');
+    }
+
+    private function validated(Request $request): array
+    {
+        return $request->validate([
+            'vot_id' => ['required', 'exists:vot,id'],
+            'kategori' => ['required', 'max:255'],
+            'tujuan' => ['required'],
+            'gambar_1' => ['nullable', 'image', 'mimes:jpg,jpeg,png', 'max:5120'],
+            'gambar_2' => ['nullable', 'image', 'mimes:jpg,jpeg,png', 'max:5120'],
+            'items' => ['required', 'array', 'min:1'],
+            'items.*.item' => ['required', 'max:255'],
+            'items.*.kuantiti' => ['required', 'integer', 'min:1'],
+            'items.*.harga_anggaran' => ['required', 'numeric', 'min:0'],
+        ]);
+    }
+
+    private function storeImage(Request $request, string $field): ?string
+    {
+        return $request->hasFile($field) ? $request->file($field)->store('permohonan', 'public') : null;
+    }
+
+    private function authorizeOwner(Permohonan $permohonan): void
+    {
+        abort_unless($permohonan->user_id === auth()->id() || auth()->user()->hasAnyRole(['Admin', 'Pelaksana']), 403);
+    }
+}

app/Http/Controllers/ProfileController.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+
+class ProfileController extends Controller
+{
+    public function edit()
+    {
+        return view('profile.edit');
+    }
+
+    public function update(Request $request)
+    {
+        $validated = $request->validate([
+            'name' => ['required', 'max:255'],
+            'no_telefon' => ['nullable', 'max:30'],
+            'jawatan' => ['nullable', 'max:255'],
+        ]);
+
+        $request->user()->update($validated);
+
+        return back()->with('success', 'Profil berjaya dikemaskini.');
+    }
+}

app/Http/Middleware/EnsureUserIsActive.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Symfony\Component\HttpFoundation\Response;
+
+class EnsureUserIsActive
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        if (Auth::check() && ! Auth::user()->status) {
+            Auth::logout();
+
+            return redirect()->route('login')->withErrors(['email' => 'Akaun anda tidak aktif.']);
+        }
+
+        return $next($request);
+    }
+}