add policies for getInvalidUsers route

2026-01-12 09:55:19 +01:00
parent 46a4ac9c15
commit bf6deadbc0
2 changed files with 8 additions and 0 deletions
@@ -218,6 +218,9 @@ class UserController extends Controller
    }

    public function getInvalidUsers(Request $request): JsonResponse {
+        if(Gate::denies('getInvalidUsers', $request->user())){
+            return response()->json(["message" => "Can't add role to this user"], 403);
+        }

        try {

@@ -21,4 +21,9 @@ class UsersPolicy
    {
        return $user->role === 1;
    }
+
+    public function getInvalidUsers(User $user) : bool
+    {
+        return $user->role === 1 || $user->role === 2;
+    }
 }