feat: introduce root permission

2024-12-09 10:52:38 +01:00
parent 5bbcd7bf76
commit ff74fb7385
5 changed files with 30 additions and 13 deletions
--- a/app/Http/Middleware/ApiAbility.php
+++ b/app/Http/Middleware/ApiAbility.php
@@ -9,6 +9,10 @@ class ApiAbility extends CheckForAnyAbility
    public function handle($request, $next, ...$abilities)
    {
        try {
+            if ($request->user()->tokenCan('root')) {
+                return $next($request);
+            }
+
            return parent::handle($request, $next, ...$abilities);
        } catch (\Illuminate\Auth\AuthenticationException $e) {
            return response()->json([