From d19bd8000a923e886ce6fcc6aea250b135184df4 Mon Sep 17 00:00:00 2001 From: Yoga Pangestu Date: Thu, 25 Jun 2026 21:16:12 +0700 Subject: [PATCH] refactor: update authorization logic in AppServiceProvider to restrict access for OWNER role --- app/Providers/AppServiceProvider.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/Providers/AppServiceProvider.php b/app/Providers/AppServiceProvider.php index 3084cc8..0e38c8a 100644 --- a/app/Providers/AppServiceProvider.php +++ b/app/Providers/AppServiceProvider.php @@ -40,7 +40,7 @@ protected function configureObservers(): void protected function configureAuthorization(): void { Gate::before(function ($user, string $ability) { - if ($user->hasRole(Role::DEVELOPER->value) || $user->hasRole(Role::OWNER->value)) { + if ($user->hasRole(Role::DEVELOPER->value)) { return true; }