c9b50ccc5e
- Replace is_admin boolean with role enum('super_admin','admin') via migration
- ProgramPolicy: admin program can only view/edit/delete own programs
- EnsureIsAdmin: accepts both roles; EnsureSuperAdmin: super_admin only
- UserController + views: super_admin can manage admin accounts
- Sidebar: user management link & role badge gated on isSuperAdmin()
- Fix Controller base class: add AuthorizesRequests trait
- Fix tests: replace nonAdmin() (invalid enum) with adminProgram() against super_admin-only route
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
22 lines
421 B
PHP
22 lines
421 B
PHP
<?php
|
|
|
|
namespace App\Http\Middleware;
|
|
|
|
use Closure;
|
|
use Illuminate\Http\Request;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
|
|
class EnsureIsAdmin
|
|
{
|
|
public function handle(Request $request, Closure $next): Response
|
|
{
|
|
$role = $request->user()?->role;
|
|
|
|
if (! in_array($role, ['super_admin', 'admin'])) {
|
|
abort(403, 'Akses ditolak.');
|
|
}
|
|
|
|
return $next($request);
|
|
}
|
|
}
|