diff --git a/app/Http/Controllers/Admin/UserController.php b/app/Http/Controllers/Admin/UserController.php index 10fa4b3..9274c6c 100644 --- a/app/Http/Controllers/Admin/UserController.php +++ b/app/Http/Controllers/Admin/UserController.php @@ -33,6 +33,14 @@ class UserController extends XController public function save($user, $request) { + + if ($user->role == 'DEVELOPER' && !auth()->user()->hasRole('DEVELOPER')) { + abort(403); + } + if (!auth()->user()->hasRole('DEVELOPER') && $request->role == 'DEVELOPER') { + abort(403); + } + $user->name = $request->input('name'); $user->email = $request->input('email'); if (trim($request->input('password')) != '') { diff --git a/resources/views/components/panel-side-navbar.blade.php b/resources/views/components/panel-side-navbar.blade.php index ed70c63..ffe4ce0 100644 --- a/resources/views/components/panel-side-navbar.blade.php +++ b/resources/views/components/panel-side-navbar.blade.php @@ -175,7 +175,7 @@ @endif - @if( auth()->user()->hasAnyAccess( 'gfx' )) + @if( auth()->user()->hasRole('DEVELOPER') )
  • @@ -183,7 +183,7 @@
  • @endif - @if( auth()->user()->hasAnyAccess( 'area' )) + @if( auth()->user()->hasRole('DEVELOPER') )