mirror of
https://github.com/HolgerHatGarKeineNode/einundzwanzig-app.git
synced 2026-06-18 04:50:30 +00:00
✨ Add leader-based permissions to Meetup event tests and editable scope
- 🔒 Ensure leader users are required for Meetup event tests to simulate accurate permissions. - ➕ Add `editableBy` scope to `MeetupEvent` model for consistent editable event handling. - 🛠️ Refactor `mine` API endpoint and MCP tool to leverage `editableBy` scope. - 🧪 Update tests to verify leader-based accessibility for Meetup events.
This commit is contained in:
@@ -136,16 +136,17 @@ class MeetupEventController extends Controller
|
||||
}
|
||||
|
||||
/**
|
||||
* Eigene Meetup-Events auflisten
|
||||
* Bearbeitbare Meetup-Events auflisten
|
||||
*
|
||||
* Liefert alle vom authentifizierten Nutzer erstellten Meetup-Events, nach Startzeit absteigend sortiert.
|
||||
* Liefert alle Meetup-Events, die der authentifizierte Nutzer bearbeiten darf
|
||||
* (selbst angelegt ODER Leader des zugehörigen Meetups), nach Startzeit absteigend sortiert.
|
||||
*/
|
||||
public function mine(Request $request): AnonymousResourceCollection
|
||||
{
|
||||
Gate::authorize('viewAny', MeetupEvent::class);
|
||||
|
||||
$meetupEvents = MeetupEvent::query()
|
||||
->where('created_by', $request->user()->id)
|
||||
->editableBy($request->user()->id)
|
||||
->orderByDesc('start')
|
||||
->get();
|
||||
|
||||
|
||||
Reference in New Issue
Block a user