dst/store
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor: remove role-based access check in EmployeeAdvanceController pay method to simplify authorization logic

Browse Source
This commit is contained in:
Yoga Pangestu 2026-06-20 10:39:37 +07:00
parent 7423046057
commit 3cdabfae30
1 changed files with 0 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
app/Http/Controllers/Admin/Finance/EmployeeAdvanceController.php
View File

@ -104,9 +104,6 @@ public function reject(RejectEmployeeAdvanceRequest $request, EmployeeAdvance $e
public function pay(EmployeeAdvance $employeeAdvance): RedirectResponse public function pay(EmployeeAdvance $employeeAdvance): RedirectResponse
{ {
$user = auth()->user(); $user = auth()->user();
if ($user && ! $user->hasAnyRole(['owner', 'developer', 'direktur'])) {
abort(403);
}
$this->employeeAdvanceService->pay($employeeAdvance, $user); $this->employeeAdvanceService->pay($employeeAdvance, $user);