update api register

2026-08-01 11:42:42 +07:00
parent b0d08211ec
commit 75342dc7b7
55 changed files with 2254 additions and 35 deletions
@@ -12,7 +12,10 @@ class EnsureAccessLevel
    {
        $user = $request->user();

-        if (! $user || (! $user->isMasterAdmin() && ! in_array($user->access_level->value, $levels, true))) {
+        $tenantId = $request->attributes->get('tenant_id');
+        $effectiveLevel = $tenantId ? $user?->tenantRole($tenantId) : $user?->access_level?->value;
+
+        if (! $user || (! $user->isMasterAdmin() && ! in_array($effectiveLevel, $levels, true))) {
            return response()->json([
                'success' => false,
                'code' => 403,