From 3cdabfae3062bb2b690a52b5b52f1a641d9f325b Mon Sep 17 00:00:00 2001
From: Yoga Pangestu <ypangestu976@gmail.com>
Date: Sat, 20 Jun 2026 10:39:37 +0700
Subject: [PATCH] refactor: remove role-based access check in
 EmployeeAdvanceController pay method to simplify authorization logic

---
 .../Controllers/Admin/Finance/EmployeeAdvanceController.php    | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/app/Http/Controllers/Admin/Finance/EmployeeAdvanceController.php b/app/Http/Controllers/Admin/Finance/EmployeeAdvanceController.php
index 29e0b66..d9bb416 100644
--- a/app/Http/Controllers/Admin/Finance/EmployeeAdvanceController.php
+++ b/app/Http/Controllers/Admin/Finance/EmployeeAdvanceController.php
@@ -104,9 +104,6 @@ public function reject(RejectEmployeeAdvanceRequest $request, EmployeeAdvance $e
     public function pay(EmployeeAdvance $employeeAdvance): RedirectResponse
     {
         $user = auth()->user();
-        if ($user && ! $user->hasAnyRole(['owner', 'developer', 'direktur'])) {
-            abort(403);
-        }
 
         $this->employeeAdvanceService->pay($employeeAdvance, $user);