diff --git a/app/Policies/TicketPolicy.php b/app/Policies/TicketPolicy.php index 3cd7133..e49d075 100644 --- a/app/Policies/TicketPolicy.php +++ b/app/Policies/TicketPolicy.php @@ -33,14 +33,23 @@ class TicketPolicy extends RootPolicy */ $this->policies = [ 'ticket' => [ - 'viewAny' => URR::make('allowEveryOne'), - 'view' => URR::make('allowEveryOne'), + 'viewAny' => StaticRules::or([ + URR::make('userIsAdmin', $user), + SSR::make('userSitesHasTicket', $user, $model) + ]), + 'view' => StaticRules::or([ + URR::make('userIsAdmin', $user), + SSR::make('userSitesHasTicket', $user, $model) + ]), 'update' => StaticRules::or([ URR::make('userIsAdmin', $user), SSR::make('userSitesHasTicket', $user, $model) ]), 'changeStatus' => URR::make('userIsAdmin', $user), - 'create' => URR::make('allowEveryOne'), + 'create' => StaticRules::or([ + URR::make('userIsAdmin', $user), + SSR::make('userSitesHasTicket', $user, $model) + ]), 'delete' => URR::make('denyEveryOne'), 'forceDelete' => URR::make('denyEveryOne'), 'restore' => StaticRules::or([