assiend permission for rahdaran

app/Http/Controllers/V3/RahdaranController.php

@@ -13,6 +13,7 @@ use App\Models\Rahdaran;
 use Illuminate\Database\QueryException;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
 
 class RahdaranController extends Controller
 {
@@ -20,8 +21,16 @@ class RahdaranController extends Controller
 
     public function index(Request $request): JsonResponse
     {
+        $user = Auth::user();
+        $query = $user->hasPermissionTo('manage-rahdaran-country') ?
+            Rahdaran::query() :
+            ($user->hasPermissionTo('manage-rahdaran-province') ?
+                Rahdaran::query()->where('province_id', '=', $user->province_id) :
+                Rahdaran::query()->where('edareh_shahri_id', '=', $user->edarate_shahri_id)
+            );
+
         return response()->json(DataTableFacade::run(
-            Rahdaran::query(),
+            $query,
             $request,
             allowedFilters: ['*'],
             allowedSortings: ['*'])

routes/v3.php

@@ -185,6 +185,7 @@ Route::prefix('cmms_machines')
 
 Route::prefix('rahdaran')
     ->name('rahdaran.')
+    ->middleware('permission:manage-rahdaran-province|manage-rahdaran-edareh|manage-rahdaran-country')
     ->controller(RahdaranController::class)
     ->group(function () {
         Route::get('/', 'index')->name('index');