Vasyka/autocrm
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: implement per-role WO visibility via getEloquentQuery

Browse Source 
Admin/owner and users with work_orders.view_all see all work orders.
Users with only work_orders.view_own_assigned (mechanics) see only
work orders where master_id = their own user ID.
Roles without either permission see nothing.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Vasyka
2026-09-06 10:16:55 +00:00
parent 0af8f2a755
commit a618f0af32
1 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/Filament/Tenant/Resources/WorkOrderResource.php
+22
View File
@@ -11,6 +11,7 @@ use App\Models\Tenant\WorkOrder;
use App\Tenancy\TenantManager;
use Filament\Actions;
use Filament\Forms;
use Illuminate\Database\Eloquent\Builder;
use Filament\Resources\Resource;
use Filament\Schemas;
use Filament\Schemas\Components\Utilities\Get;
@@ -244,4 +245,25 @@ class WorkOrderResource extends Resource
'edit' => Pages\EditWorkOrder::route('/{record}/edit'),
];
}
/**
* Apply per-user visibility based on the permissions matrix:
* admin/owner → all work orders
* work_orders.view_all → all work orders
* view_own_assigned only → only WOs where master_id = current user
*/
public static function getEloquentQuery(): Builder
{
$query = parent::getEloquentQuery();
$user = auth()->user();
if (! $user) return $query->whereRaw('0 = 1');
if ($user->isAdmin()) return $query;
if ($user->canDo(\App\Auth\Permissions::WORK_ORDERS_VIEW_ALL)) return $query;
if ($user->canDo(\App\Auth\Permissions::WORK_ORDERS_VIEW_OWN_ASSIGNED)) {
return $query->where('master_id', $user->id);
}
return $query->whereRaw('0 = 1');
}
}