From ff8ad19d17e1b7687191c8ec48087ce0b054a424 Mon Sep 17 00:00:00 2001 From: Geriano Date: Fri, 29 Jul 2022 21:57:55 +0700 Subject: [PATCH] now only superuser can look all of login history --- app/Http/Controllers/ActivityController.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/app/Http/Controllers/ActivityController.php b/app/Http/Controllers/ActivityController.php index 8ac05d9..677a241 100644 --- a/app/Http/Controllers/ActivityController.php +++ b/app/Http/Controllers/ActivityController.php @@ -37,8 +37,11 @@ class ActivityController extends Controller ->orWhere('login_activities.platform', 'like', $search) ->orWhere('login_activities.created_at', 'like', $search); }) + ->when(!$request->user()->hasRole('superuser'), function (Builder $query) use ($request) { + $query->where('users.id', $request->user()->id); + }) ->select(['users.*', 'login_activities.*']) - ->orderBy($request->input('order.key') ?: 'created_at', $request->input('order.dir') ?: 'asc') + ->orderBy($request->input('order.key') ?: 'created_at', $request->input('order.dir') ?: 'desc') ->paginate($request->per_page ?: 10); } }