update lisensi prosess

app/Http/Controllers/Administration/UserController.php

@@ -9,6 +9,7 @@ use App\Http\Requests\Administration\StoreUserRequest;
 use App\Http\Requests\Administration\UpdateUserRequest;
 use App\Models\Tenant;
 use App\Models\User;
+use App\Services\LicenseEntitlementService;
 use Illuminate\Http\RedirectResponse;
 use Inertia\Inertia;
 use Inertia\Response;
@@ -33,11 +34,12 @@ class UserController extends Controller
     {
         abort_unless(request()->user()->can('user.create'), 403);
 
-        return Inertia::render('administration/users/create', ['tenant' => $tenant]);
+        return Inertia::render('administration/users/create', ['tenant' => $tenant, 'canManageRoles' => request()->user()->is_platform_admin]);
     }
 
     public function store(StoreUserRequest $request, Tenant $tenant): RedirectResponse
     {
+        app(LicenseEntitlementService::class)->assertCanAddUser($tenant->id);
         $data = $request->validated();
         $user = User::create([
             'tenant_id' => $tenant->id,
@@ -47,7 +49,8 @@ class UserController extends Controller
             'is_active' => $data['is_active'] ?? true,
         ]);
         $user->forceFill(['email_verified_at' => now()])->save();
-        $user->assignRole(SystemRole::TenantUser->value);
+        $role = $request->user()->is_platform_admin ? ($data['role'] ?? SystemRole::TenantUser->value) : SystemRole::TenantUser->value;
+        $user->assignRole($role);
 
         return to_route('administration.users.index', $tenant)->with('success', 'User berhasil dibuat.');
     }
@@ -60,6 +63,7 @@ class UserController extends Controller
         return Inertia::render('administration/users/edit', [
             'tenant' => $tenant,
             'managedUser' => $user->load('roles:id,name'),
+            'canManageRoles' => request()->user()->is_platform_admin,
         ]);
     }
 
@@ -68,6 +72,9 @@ class UserController extends Controller
         $this->ensureManageableUser($tenant, $user);
         $data = $request->validated();
         $user->update(['name' => $data['name'], 'email' => $data['email']]);
+        if ($request->user()->is_platform_admin && isset($data['role'])) {
+            $user->syncRoles([$data['role']]);
+        }
 
         return back()->with('success', 'User berhasil diperbarui.');
     }