Commit 5d8321f6 authored by José Rômulo's avatar José Rômulo
Browse files

Adicionando checagem multipla de tipo nas rotas

parent 69192e2f
...@@ -65,6 +65,8 @@ class Kernel extends HttpKernel ...@@ -65,6 +65,8 @@ class Kernel extends HttpKernel
'isTemp' => \App\Http\Middleware\IsTemp::class, 'isTemp' => \App\Http\Middleware\IsTemp::class,
'checkAdministrador' => \App\Http\Middleware\checkAdministrador::class, 'checkAdministrador' => \App\Http\Middleware\checkAdministrador::class,
'checkAdminResp' => \App\Http\Middleware\checkAdminResp::class, 'checkAdminResp' => \App\Http\Middleware\checkAdminResp::class,
'checkCoordenador' => \App\Http\Middleware\checkCoordenador::class,
'checkRoles' => \App\Http\Middleware\checkRoles::class,
]; ];
/** /**
......
<?php
namespace App\Http\Middleware;
use Auth;
use Closure;
use Illuminate\Support\Facades\Log;
class checkRoles
{
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle($request, Closure $next, ... $roles)
{
if(!Auth::check()){
Log::debug('checkRoles');
return redirect('/');
}
$user = Auth::user();
/*
if($user->tipo == 'administrador'){
return $next($request);
}*/
foreach($roles as $role){
if($user->tipo == $role){
return $next($request);
}
}
return redirect('home')->with('error', 'Você não possui privilégios para acessar esta funcionalidade');
}
}
...@@ -231,16 +231,9 @@ Route::prefix('evento')->name('evento.')->group(function(){ ...@@ -231,16 +231,9 @@ Route::prefix('evento')->name('evento.')->group(function(){
Route::post( '/criar', 'EventoController@store' )->name('criar')->middleware('checkAdministrador'); Route::post( '/criar', 'EventoController@store' )->name('criar')->middleware('checkAdministrador');
Route::get( '/visualizar/{id}','EventoController@show' )->name('visualizar')->middleware('auth'); Route::get( '/visualizar/{id}','EventoController@show' )->name('visualizar')->middleware('auth');
Route::get( '/listar', 'EventoController@listar' )->name('listar')->middleware('auth'); Route::get( '/listar', 'EventoController@listar' )->name('listar')->middleware('auth');
Route::delete( '/excluir/{id}', 'EventoController@destroy' )->name('deletar')->middleware('checkRoles:coordenador,administrador');
Route::delete( '/excluir/{id}', 'EventoController@destroy' )->name('deletar')->middleware('checkAdministrador'); Route::get( '/editar/{id}', 'EventoController@edit' )->name('editar')->middleware('checkRoles:coordenador,administrador');
Route::delete( '/excluir/{id}', 'EventoController@destroy' )->name('deletar')->middleware(checkCoordenador::class); Route::post( '/editar/{id}', 'EventoController@update' )->name('update')->middleware('checkRoles:coordenador,administrador');
Route::get( '/editar/{id}', 'EventoController@edit' )->name('editar')->middleware('checkAdministrador');
Route::get( '/editar/{id}', 'EventoController@edit' )->name('editar')->middleware(checkCoordenador::class);
Route::post( '/editar/{id}', 'EventoController@update' )->name('update')->middleware('checkAdministrador');
Route::post( '/editar/{id}', 'EventoController@update' )->name('update')->middleware(checkCoordenador::class);
Route::post( '/setResumo', 'EventoController@setResumo' )->name('setResumo')->middleware('checkAdministrador'); Route::post( '/setResumo', 'EventoController@setResumo' )->name('setResumo')->middleware('checkAdministrador');
Route::post( '/setFoto', 'EventoController@setFotoEvento' )->name('setFotoEvento')->middleware('checkAdministrador'); Route::post( '/setFoto', 'EventoController@setFotoEvento' )->name('setFotoEvento')->middleware('checkAdministrador');
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment