nala/compras
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

commit13

Browse Source
This commit is contained in:
nala
2026-11-02 08:08:05 +02:00
parent 13a6cb9922
commit 504b01b244
246 changed files with 24499 additions and 185 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Http/Middleware/EnsureOrganizationAccess.php
+6 -4
View File
@@ -2,6 +2,7 @@
namespace App\Http\Middleware;
use App\Models\User;
use App\Services\OrganizationAccess;
use App\Services\RequisitionWorkflow;
use Closure;
@@ -12,14 +13,15 @@ class EnsureOrganizationAccess
{
public function handle(Request $request, Closure $next): Response
{
$user = $request->user();
if ($user !== null && $user->tenant_id !== null) {
$user = $request->user('web');
if ($user instanceof User && $user->tenant_id !== null) {
abort_unless(app(OrganizationAccess::class)->permissions($user) !== [], 403, 'Não existe uma atribuição de acesso válida. Contacte os administradores da empresa.');
abort_if(app(OrganizationAccess::class)->maintenanceOnly($user) && ! $request->isMethodSafe(), 403, 'A manutenção temporária tem acesso de diagnóstico e consulta.');
$contextSelection = $request->isMethod('POST') && $request->routeIs('work-context.select');
abort_if(app(OrganizationAccess::class)->maintenanceOnly($user) && ! $request->isMethodSafe() && ! $contextSelection, 403, 'A manutenção temporária tem acesso de diagnóstico e consulta.');
}
$response = $next($request);
if ($user !== null && app(OrganizationAccess::class)->maintenanceOnly($user)) {
if ($user instanceof User && app(OrganizationAccess::class)->maintenanceOnly($user)) {
app(RequisitionWorkflow::class)->audit($user, 'maintenance.consulted', null, null, ['path' => $request->path(), 'status' => $response->getStatusCode()]);
}