From b6951c0b9b83a03e468d4412e98d1093a1310e34 Mon Sep 17 00:00:00 2001
From: joddyabott <faezehzafarbakhsh@gmail.com>
Date: Wed, 1 Oct 2025 11:23:03 +0330
Subject: [PATCH] assiend permission for rahdaran

---
 app/Http/Controllers/V3/RahdaranController.php | 11 ++++++++++-
 routes/v3.php                                  |  1 +
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/app/Http/Controllers/V3/RahdaranController.php b/app/Http/Controllers/V3/RahdaranController.php
index 04591522..47c8383e 100644
--- a/app/Http/Controllers/V3/RahdaranController.php
+++ b/app/Http/Controllers/V3/RahdaranController.php
@@ -13,6 +13,7 @@ use App\Models\Rahdaran;
 use Illuminate\Database\QueryException;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
 
 class RahdaranController extends Controller
 {
@@ -20,8 +21,16 @@ class RahdaranController extends Controller
 
     public function index(Request $request): JsonResponse
     {
+        $user = Auth::user();
+        $query = $user->hasPermissionTo('manage-rahdaran-country') ?
+            Rahdaran::query() :
+            ($user->hasPermissionTo('manage-rahdaran-province') ?
+                Rahdaran::query()->where('province_id', '=', $user->province_id) :
+                Rahdaran::query()->where('edareh_shahri_id', '=', $user->edarate_shahri_id)
+            );
+
         return response()->json(DataTableFacade::run(
-            Rahdaran::query(),
+            $query,
             $request,
             allowedFilters: ['*'],
             allowedSortings: ['*'])
diff --git a/routes/v3.php b/routes/v3.php
index 7120ef76..338a4cc4 100644
--- a/routes/v3.php
+++ b/routes/v3.php
@@ -185,6 +185,7 @@ Route::prefix('cmms_machines')
 
 Route::prefix('rahdaran')
     ->name('rahdaran.')
+    ->middleware('permission:manage-rahdaran-province|manage-rahdaran-edareh|manage-rahdaran-country')
     ->controller(RahdaranController::class)
     ->group(function () {
         Route::get('/', 'index')->name('index');