From 0a48fd16df4d5ce4f4ebac84513e581f74619021 Mon Sep 17 00:00:00 2001
From: A1Gard <a1gard@4xmen.ir>
Date: Wed, 4 Sep 2024 07:25:33 +0330
Subject: [PATCH] updated developer access role

---
 app/Http/Controllers/Admin/UserController.php          | 8 ++++++++
 resources/views/components/panel-side-navbar.blade.php | 4 ++--
 2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/app/Http/Controllers/Admin/UserController.php b/app/Http/Controllers/Admin/UserController.php
index 10fa4b3..9274c6c 100644
--- a/app/Http/Controllers/Admin/UserController.php
+++ b/app/Http/Controllers/Admin/UserController.php
@@ -33,6 +33,14 @@ class UserController extends XController
 
     public function save($user, $request)
     {
+
+        if ($user->role == 'DEVELOPER' && !auth()->user()->hasRole('DEVELOPER')) {
+            abort(403);
+        }
+        if (!auth()->user()->hasRole('DEVELOPER') && $request->role == 'DEVELOPER') {
+            abort(403);
+        }
+
         $user->name = $request->input('name');
         $user->email = $request->input('email');
         if (trim($request->input('password')) != '') {
diff --git a/resources/views/components/panel-side-navbar.blade.php b/resources/views/components/panel-side-navbar.blade.php
index ed70c63..ffe4ce0 100644
--- a/resources/views/components/panel-side-navbar.blade.php
+++ b/resources/views/components/panel-side-navbar.blade.php
@@ -175,7 +175,7 @@
                         </li>
 
                     @endif
-                    @if(  auth()->user()->hasAnyAccess( 'gfx' ))
+                    @if(  auth()->user()->hasRole('DEVELOPER') )
                         <li>
                             <a href="{{route('admin.gfx.index')}}">
                                 <i class="ri-color-filter-line"></i>
@@ -183,7 +183,7 @@
                             </a>
                         </li>
                     @endif
-                    @if(  auth()->user()->hasAnyAccess( 'area' ))
+                    @if(  auth()->user()->hasRole('DEVELOPER') )
                         <li>
                             <a href="{{route('admin.area.index')}}">
                                 <i class="ri-paint-brush-line"></i>