diff --git a/app/Http/Controllers/Common/Companies.php b/app/Http/Controllers/Common/Companies.php index a31c0ddb3..aca99a8ea 100644 --- a/app/Http/Controllers/Common/Companies.php +++ b/app/Http/Controllers/Common/Companies.php @@ -16,6 +16,15 @@ class Companies extends Controller { use Uploads, Users; + public function __construct() + { + // Add CRUD permission checks to all methods only remove index method for all companies list. + $this->middleware('permission:create-common-companies')->only('create', 'store', 'duplicate', 'import'); + $this->middleware('permission:read-common-companies')->only('show', 'edit', 'export'); + $this->middleware('permission:update-common-companies')->only('update', 'enable', 'disable'); + $this->middleware('permission:delete-common-companies')->only('destroy'); + } + /** * Display a listing of the resource. * diff --git a/resources/views/auth/users/create.blade.php b/resources/views/auth/users/create.blade.php index c9e19074a..0a7cc6d13 100644 --- a/resources/views/auth/users/create.blade.php +++ b/resources/views/auth/users/create.blade.php @@ -32,23 +32,25 @@ - @if (user()->can('read-common-companies') || user()->hasRole(['admin', 'manager'])) - - - - + + + + - - @can('read-common-companies') - + + + + @if (module_is_enabled('roles')) + @can('read-roles-roles') + @endcan - + @else @role('admin|manager') @endrole - - - @endif + @endif + + diff --git a/resources/views/auth/users/edit.blade.php b/resources/views/auth/users/edit.blade.php index 33b340ec7..0263e486a 100644 --- a/resources/views/auth/users/edit.blade.php +++ b/resources/views/auth/users/edit.blade.php @@ -38,23 +38,25 @@ - @if (user()->can('read-common-companies') || user()->hasRole(['admin', 'manager'])) - - - - + + + + - - @can('read-common-companies') - + + + + @if (module_is_enabled('roles')) + @can('read-roles-roles') + @endcan - + @else @role('admin|manager') @endrole - - - @endif + @endif + + diff --git a/resources/views/components/layouts/admin/menu.blade.php b/resources/views/components/layouts/admin/menu.blade.php index c0270c4ca..08de349fa 100644 --- a/resources/views/components/layouts/admin/menu.blade.php +++ b/resources/views/components/layouts/admin/menu.blade.php @@ -123,39 +123,33 @@ - @can('read-common-companies') -
- -
- @endcan +
+ +
- @can('read-common-companies') -