Skip to content

Commit c5e84ab

Browse files
committed
Only allow super admins to access health
1 parent ea59e2f commit c5e84ab

File tree

3 files changed

+6
-2
lines changed

3 files changed

+6
-2
lines changed

app/Models/User.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -79,7 +79,7 @@ public function updatePassword(?string $new_password = '')
7979

8080
public function canAccessPanel(?Panel $panel = null): bool
8181
{
82-
return $this->hasRole(Role::SUPER_ADMIN->value);
82+
return $this->hasRole([Role::SUPER_ADMIN, Role::ADMIN]);
8383
}
8484

8585
/**

bootstrap/app.php

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,9 @@
1515
->withMiddleware(function (Middleware $middleware) {
1616
$middleware->alias([
1717
'password.confirm' => \Illuminate\Auth\Middleware\RequirePassword::class,
18+
'role' => \Spatie\Permission\Middleware\RoleMiddleware::class,
19+
'permission' => \Spatie\Permission\Middleware\PermissionMiddleware::class,
20+
'role_or_permission' => \Spatie\Permission\Middleware\RoleOrPermissionMiddleware::class,
1821
]);
1922

2023
$middleware->web(append: [

routes/web.php

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
<?php
22

3+
use App\Enums\Role;
34
use Illuminate\Support\Facades\Route;
45

5-
Route::get('health', Spatie\Health\Http\Controllers\HealthCheckResultsController::class)->middleware(['auth']);
6+
Route::get('health', Spatie\Health\Http\Controllers\HealthCheckResultsController::class)->middleware(['auth', 'role:'.Role::SUPER_ADMIN->value]);
67

78
Route::controller(App\Http\Controllers\RegisterController::class)
89
->middleware(['guest'])

0 commit comments

Comments
 (0)