From 7ac3f28dc7c8bbe98f2eaf60cd490546333eeb07 Mon Sep 17 00:00:00 2001
From: myuqinurrohman <romanovthewriter@gmail.com>
Date: Thu, 10 Apr 2025 14:17:16 +0700
Subject: [PATCH] chore: adding forgotten authorization middleware

---
 resources/views/errors/403.blade.php |   2 +-
 routes/web.php                       | 250 ++++++++++++++-------------
 2 files changed, 133 insertions(+), 119 deletions(-)

diff --git a/resources/views/errors/403.blade.php b/resources/views/errors/403.blade.php
index 7553740..701d28c 100644
--- a/resources/views/errors/403.blade.php
+++ b/resources/views/errors/403.blade.php
@@ -15,7 +15,7 @@
   <div class="error-container">
     <img src="{{ asset('assets/errors/images/403-error.svg') }}" alt="Error Illustration" />
     <h1>Akses Ditolak!</h1>
-    <p>Kamu tidak punya izin untuk membuka halaman ini. Kalau merasa ini salah, hubungi admin ya.</p>
+    <p>Kamu tidak punya izin untuk membuka halaman ini.</p>
     <a href="{{Auth::check() ? route('dashboard.overview') : route('homepage.landing')}}" class="back">Kembali</a>
   </div>
 
diff --git a/routes/web.php b/routes/web.php
index 92763c5..73b903b 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -150,62 +150,68 @@
             });
         });
 
-        Route::prefix('government-agencies')->name('government.agencies.')->group(function(){
-            Route::controller(GovernmentAgencyController::class)->group(function(){
-                Route::get('/', 'index')->name('index');
-                Route::get('/{id}/show', 'show')->name('show');
-
-                Route::middleware('role:1')->group(function(){
-                    Route::get('/create', 'create')->name('create');
-                    Route::post('/', 'store')->name('store');
-                    Route::get('/{id}/edit', 'edit')->name('edit');
-                    Route::put('/{id}', 'update')->name('update');
-                    Route::delete('/{id}', 'destroy')->name('destroy');
-                });
-            });
-
-            Route::get('/data', [DatatableController::class, 'governmentAgency'])->name('data');
-        });
-
-        Route::prefix('news')->name('news.')->group(function(){
-            Route::controller(NewsController::class)->group(function(){
-                Route::get('/', 'index')->name('index');
-                Route::post('/export', 'export')->name('export');
-                Route::post('/filter', 'filter')->name('filter');
-                Route::get('/{id}/show', 'show')->name('show');
-
-                Route::middleware('role:1')->group(function(){
-                    Route::get('/create', 'create')->name('create');
-                    Route::post('/', 'store')->name('store');
-                    Route::get('/{id}/edit', 'edit')->name('edit');
-                    Route::put('/{id}', 'update')->name('update');
-                    Route::delete('/{id}', 'destroy')->name('destroy');
-                });
-            });
-
-            Route::get('/data', [DatatableController::class, 'news'])->name('data');
-        });
-
-
-        Route::prefix('announcements')->name('announcements.')->group(function(){
-            Route::controller(AnnouncementController::class)->group(function(){
-
-                Route::get('/', 'index')->name('index');
-                Route::middleware('role:1')->group(function(){
+        Route::middleware('role:1,2,4')->group(function(){
+            Route::prefix('government-agencies')->name('government.agencies.')->group(function(){
+                Route::controller(GovernmentAgencyController::class)->group(function(){
+                    Route::get('/', 'index')->name('index');
                     Route::get('/{id}/show', 'show')->name('show');
 
-                    Route::get('/create', 'create')->name('create');
-                    Route::post('/', 'store')->name('store');
-                    Route::get('/{id}/edit', 'edit')->name('edit');
-                    Route::put('/{id}', 'update')->name('update');
-                    Route::delete('/{id}', 'destroy')->name('destroy');
+                    Route::middleware('role:1')->group(function(){
+                        Route::get('/create', 'create')->name('create');
+                        Route::post('/', 'store')->name('store');
+                        Route::get('/{id}/edit', 'edit')->name('edit');
+                        Route::put('/{id}', 'update')->name('update');
+                        Route::delete('/{id}', 'destroy')->name('destroy');
+                    });
                 });
 
-                Route::get('/{id}/read', 'read')->name('read');
+                Route::get('/data', [DatatableController::class, 'governmentAgency'])->name('data');
             });
+        });
 
-            Route::get('/data/{type?}', [DatatableController::class, 'announcement'])->name('data');
-            Route::get('/announcement-media-data/{type}', [DatatableController::class, 'mediaAnnouncement'])->name('media.data');
+        Route::middleware('role:1')->group(function(){
+            Route::prefix('news')->name('news.')->group(function(){
+                Route::controller(NewsController::class)->group(function(){
+                    Route::get('/', 'index')->name('index');
+                    Route::post('/export', 'export')->name('export');
+                    Route::post('/filter', 'filter')->name('filter');
+                    Route::get('/{id}/show', 'show')->name('show');
+
+                    Route::middleware('role:1')->group(function(){
+                        Route::get('/create', 'create')->name('create');
+                        Route::post('/', 'store')->name('store');
+                        Route::get('/{id}/edit', 'edit')->name('edit');
+                        Route::put('/{id}', 'update')->name('update');
+                        Route::delete('/{id}', 'destroy')->name('destroy');
+                    });
+                });
+
+                Route::get('/data', [DatatableController::class, 'news'])->name('data');
+            });
+        });
+
+
+        Route::middleware('role:1,2,3,4')->group(function(){
+            Route::prefix('announcements')->name('announcements.')->group(function(){
+                Route::controller(AnnouncementController::class)->group(function(){
+
+                    Route::get('/', 'index')->name('index');
+                    Route::middleware('role:1')->group(function(){
+                        Route::get('/{id}/show', 'show')->name('show');
+
+                        Route::get('/create', 'create')->name('create');
+                        Route::post('/', 'store')->name('store');
+                        Route::get('/{id}/edit', 'edit')->name('edit');
+                        Route::put('/{id}', 'update')->name('update');
+                        Route::delete('/{id}', 'destroy')->name('destroy');
+                    });
+
+                    Route::get('/{id}/read', 'read')->name('read');
+                });
+
+                Route::get('/data/{type?}', [DatatableController::class, 'announcement'])->name('data');
+                Route::get('/announcement-media-data/{type}', [DatatableController::class, 'mediaAnnouncement'])->name('media.data');
+            });
         });
 
 
@@ -218,21 +224,23 @@
             });
         });
 
-        Route::prefix('airing-proof-themes')->name('airing.proof.themes.')->group(function(){
-            Route::controller(AiringProofThemeController::class)->group(function(){
-                Route::get('/', 'index')->name('index');
-                Route::get('/{id}/show', 'show')->name('show');
+        Route::middleware('role:1,2,4')->group(function(){
+            Route::prefix('airing-proof-themes')->name('airing.proof.themes.')->group(function(){
+                Route::controller(AiringProofThemeController::class)->group(function(){
+                    Route::get('/', 'index')->name('index');
+                    Route::get('/{id}/show', 'show')->name('show');
 
-                Route::middleware('role:1')->group(function(){
-                    Route::get('/create', 'create')->name('create');
-                    Route::post('/', 'store')->name('store');
-                    Route::get('/{id}/edit', 'edit')->name('edit');
-                    Route::put('/{id}', 'update')->name('update');
-                    Route::delete('/{id}', 'destroy')->name('destroy');
+                    Route::middleware('role:1')->group(function(){
+                        Route::get('/create', 'create')->name('create');
+                        Route::post('/', 'store')->name('store');
+                        Route::get('/{id}/edit', 'edit')->name('edit');
+                        Route::put('/{id}', 'update')->name('update');
+                        Route::delete('/{id}', 'destroy')->name('destroy');
+                    });
                 });
-            });
 
-            Route::get('/data', [DatatableController::class, 'airingProofTheme'])->name('data');
+                Route::get('/data', [DatatableController::class, 'airingProofTheme'])->name('data');
+            });
         });
 
         Route::middleware('role:1,3')->group(function(){
@@ -295,29 +303,31 @@
             });
         });
 
-        Route::prefix('cooperations')->name('cooperations.')->group(function(){
-            Route::controller(MediaCooperationController::class)->group(function(){
-                Route::get('/', 'index')->name('index');
-                Route::get('/{id}/show', 'show')->name('show');
+        Route::middleware('role:1,3')->group(function(){
+            Route::prefix('cooperations')->name('cooperations.')->group(function(){
+                Route::controller(MediaCooperationController::class)->group(function(){
+                    Route::get('/', 'index')->name('index');
+                    Route::get('/{id}/show', 'show')->name('show');
 
-                Route::get('/{id}/media-proposals', 'mediaProposal')->name('media.proposal');
-                Route::get('/{id}/media-proposals/{proposal_id}/show', 'mediaProposalShow')->name('media.proposal.show');
-                Route::post('/{id}/media-proposals/{proposal_id}/accept', 'mediaProposalAccept')->name('media.proposal.accept');
-                Route::get('/{id}/media-proposals/{proposal_id}/reject', 'mediaProposalReject')->name('media.proposal.reject');
-                Route::post('/{id}/media-proposals/{proposal_id}/reject', 'mediaProposalRejectAction')->name('media.proposal.reject.action');
+                    Route::get('/{id}/media-proposals', 'mediaProposal')->name('media.proposal');
+                    Route::get('/{id}/media-proposals/{proposal_id}/show', 'mediaProposalShow')->name('media.proposal.show');
+                    Route::post('/{id}/media-proposals/{proposal_id}/accept', 'mediaProposalAccept')->name('media.proposal.accept');
+                    Route::get('/{id}/media-proposals/{proposal_id}/reject', 'mediaProposalReject')->name('media.proposal.reject');
+                    Route::post('/{id}/media-proposals/{proposal_id}/reject', 'mediaProposalRejectAction')->name('media.proposal.reject.action');
 
-                Route::get('/create', 'create')->name('create');
-                Route::post('/', 'store')->name('store');
-                Route::get('/{id}/edit', 'edit')->name('edit');
-                Route::put('/{id}', 'update')->name('update');
-                Route::delete('/{id}', 'destroy')->name('destroy');
+                    Route::get('/create', 'create')->name('create');
+                    Route::post('/', 'store')->name('store');
+                    Route::get('/{id}/edit', 'edit')->name('edit');
+                    Route::put('/{id}', 'update')->name('update');
+                    Route::delete('/{id}', 'destroy')->name('destroy');
 
-                Route::get('/{id}/process/{process}/{mediaId?}', 'process')->name('process');
+                    Route::get('/{id}/process/{process}/{mediaId?}', 'process')->name('process');
+                });
+
+                Route::get('/data', [DatatableController::class, 'cooperation'])->name('data');
+                Route::get('/media-data/{id}', [DatatableController::class, 'cooperationMedia'])->name('media.data');
+                Route::get('/cooperation-proposal-data/{id}', [DatatableController::class, 'cooperationProposal'])->name('proposal.data');
             });
-
-            Route::get('/data', [DatatableController::class, 'cooperation'])->name('data');
-            Route::get('/media-data/{id}', [DatatableController::class, 'cooperationMedia'])->name('media.data');
-            Route::get('/cooperation-proposal-data/{id}', [DatatableController::class, 'cooperationProposal'])->name('proposal.data');
         });
 
         Route::middleware('role:1,3')->group(function(){
@@ -347,55 +357,59 @@
             });
         });
 
-        Route::prefix('media-orders')->name('media.orders.')->group(function(){
-            Route::controller(MediaOrderController::class)->group(function(){
-                Route::get('/', 'index')->name('index');
-                Route::get('/{id}/show', 'show')->name('show');
+        Route::middleware('role:1,3')->group(function(){
+            Route::prefix('media-orders')->name('media.orders.')->group(function(){
+                Route::controller(MediaOrderController::class)->group(function(){
+                    Route::get('/', 'index')->name('index');
+                    Route::get('/{id}/show', 'show')->name('show');
 
-                Route::middleware('role:1')->group(function(){
-                    Route::get('/create/{id}', 'create')->name('create');
-                    Route::post('/{id}', 'store')->name('store');
-                    Route::get('/{id}/edit', 'edit')->name('edit');
-                    Route::put('/{id}', 'update')->name('update');
-                    Route::delete('/{id}', 'destroy')->name('destroy');
+                    Route::middleware('role:1')->group(function(){
+                        Route::get('/create/{id}', 'create')->name('create');
+                        Route::post('/{id}', 'store')->name('store');
+                        Route::get('/{id}/edit', 'edit')->name('edit');
+                        Route::put('/{id}', 'update')->name('update');
+                        Route::delete('/{id}', 'destroy')->name('destroy');
+
+                    });
+
+                    Route::middleware('role:3')->group(function(){
+                        Route::post('/{id}/accept', 'accept')->name('accept');
+                        Route::post('/{id}/reject', 'reject')->name('reject');
+                    });
 
                 });
 
-                Route::middleware('role:3')->group(function(){
-                    Route::post('/{id}/accept', 'accept')->name('accept');
-                    Route::post('/{id}/reject', 'reject')->name('reject');
-                });
-
+                Route::get('/media-data/{id}', [DatatableController::class, 'orderMedia'])->name('media.data');
             });
-
-            Route::get('/media-data/{id}', [DatatableController::class, 'orderMedia'])->name('media.data');
         });
 
-        Route::prefix('reports')->name('reports.')->group(function(){
-            Route::controller(ReportController::class)->group(function(){
-                Route::get('/', 'index')->name('index');
-                Route::get('/{mediaOrderId}/show/{id}', 'show')->name('show');
+        Route::middleware('role:1,3')->group(function(){
+            Route::prefix('reports')->name('reports.')->group(function(){
+                Route::controller(ReportController::class)->group(function(){
+                    Route::get('/', 'index')->name('index');
+                    Route::get('/{mediaOrderId}/show/{id}', 'show')->name('show');
 
-                Route::middleware('role:3')->group(function(){
-                    Route::get('/create/{id}', 'create')->name('create');
-                    Route::post('/check-link', 'checkLink')->name('check.link');
-                    Route::post('/{id}', 'store')->name('store');
-                    Route::get('/{mediaOrderId}/edit/{id}', 'edit')->name('edit');
-                    Route::put('/{mediaOrderId}/{id}', 'update')->name('update');
-                    Route::delete('/{id}', 'destroy')->name('destroy');
+                    Route::middleware('role:3')->group(function(){
+                        Route::get('/create/{id}', 'create')->name('create');
+                        Route::post('/check-link', 'checkLink')->name('check.link');
+                        Route::post('/{id}', 'store')->name('store');
+                        Route::get('/{mediaOrderId}/edit/{id}', 'edit')->name('edit');
+                        Route::put('/{mediaOrderId}/{id}', 'update')->name('update');
+                        Route::delete('/{id}', 'destroy')->name('destroy');
+
+                    });
+
+                    Route::middleware('role:1')->group(function(){
+                        Route::post('/{id}/accept', 'accept')->name('accept');
+                        Route::get('/{mediaOrderId}/reject/{id}', 'reject')->name('reject');
+                        Route::post('/{mediaOrderId}/reject/{id}', 'rejectAction')->name('reject.action');
+                    });
 
                 });
 
-                Route::middleware('role:1')->group(function(){
-                    Route::post('/{id}/accept', 'accept')->name('accept');
-                    Route::get('/{mediaOrderId}/reject/{id}', 'reject')->name('reject');
-                    Route::post('/{mediaOrderId}/reject/{id}', 'rejectAction')->name('reject.action');
-                });
-
+                Route::get('/admin-media-data/{id}', [DatatableController::class, 'adminMediaReport'])->name('admin.media.data');
+                Route::get('/media-data/{mediaOrderId}/{mediaId}', [DatatableController::class, 'mediaReport'])->name('media.data');
             });
-
-            Route::get('/admin-media-data/{id}', [DatatableController::class, 'adminMediaReport'])->name('admin.media.data');
-            Route::get('/media-data/{mediaOrderId}/{mediaId}', [DatatableController::class, 'mediaReport'])->name('media.data');
         });
 
         Route::middleware('role:1,3')->group(function(){