shihaam/akaunting
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

check permission before searching

Browse Source
This commit is contained in:
Denis Duliçi
2021-02-24 19:23:56 +03:00
parent 0d3f34ae8f
commit 24428977ef
1 changed files with 98 additions and 80 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
app/Http/Controllers/Common/Search.php
View File

@ -19,10 +19,13 @@ class Search extends Controller
*/ */
public function index() public function index()
{ {
$user = user();
$search = new \stdClass(); $search = new \stdClass();
$search->results = []; $search->results = [];
$search->keyword = request('keyword'); $search->keyword = request('keyword');
if ($user->can('read-banking-accounts')) {
$accounts = Account::enabled()->usingSearchString($search->keyword)->get(); $accounts = Account::enabled()->usingSearchString($search->keyword)->get();
if ($accounts->count()) { if ($accounts->count()) {
@ -36,7 +39,9 @@ class Search extends Controller
]; ];
} }
} }
}
if ($user->can('read-common-items')) {
$items = Item::enabled()->usingSearchString($search->keyword)->get(); $items = Item::enabled()->usingSearchString($search->keyword)->get();
if ($items->count()) { if ($items->count()) {
@ -50,7 +55,9 @@ class Search extends Controller
]; ];
} }
} }
}
if ($user->can('read-sales-invoices')) {
$invoices = Document::invoice()->usingSearchString($search->keyword)->get(); $invoices = Document::invoice()->usingSearchString($search->keyword)->get();
if ($invoices->count()) { if ($invoices->count()) {
@ -64,8 +71,10 @@ class Search extends Controller
]; ];
} }
} }
}
/* /*
if ($user->can('read-sales-revenues')) {
$income_transactions = Transaction::income()->usingSearchString($keyword)->get(); $income_transactions = Transaction::income()->usingSearchString($keyword)->get();
if ($income_transactions->count()) { if ($income_transactions->count()) {
@ -79,8 +88,10 @@ class Search extends Controller
]; ];
} }
} }
}
*/ */
if ($user->can('read-sales-customers')) {
$customers = Contact::customer()->enabled()->usingSearchString($search->keyword)->get(); $customers = Contact::customer()->enabled()->usingSearchString($search->keyword)->get();
if ($customers->count()) { if ($customers->count()) {
@ -94,7 +105,9 @@ class Search extends Controller
]; ];
} }
} }
}
if ($user->can('read-purchases-bills')) {
$bills = Document::bill()->usingSearchString($search->keyword)->get(); $bills = Document::bill()->usingSearchString($search->keyword)->get();
if ($bills->count()) { if ($bills->count()) {
@ -108,8 +121,10 @@ class Search extends Controller
]; ];
} }
} }
}
/* /*
if ($user->can('read-purchases-payments')) {
$payments = Transaction::expense()->usingSearchString($keyword)->get(); $payments = Transaction::expense()->usingSearchString($keyword)->get();
if ($revenues->count()) { if ($revenues->count()) {
@ -123,8 +138,10 @@ class Search extends Controller
]; ];
} }
} }
}
*/ */
if ($user->can('read-purchases-vendors')) {
$vendors = Contact::vendor()->enabled()->usingSearchString($search->keyword)->get(); $vendors = Contact::vendor()->enabled()->usingSearchString($search->keyword)->get();
if ($vendors->count()) { if ($vendors->count()) {
@ -138,6 +155,7 @@ class Search extends Controller
]; ];
} }
} }
}
event(new GlobalSearched($search)); event(new GlobalSearched($search));