fix: hapus hardcode role, ganti dengan permission check (can())

2026-04-04 09:44:14 +07:00
parent 70bb914e54
commit d3d7c6e422
7 changed files with 16 additions and 12 deletions
@@ -20,7 +20,7 @@ class ActivityPolicy
    public function view(AuthUser $authUser, Activity $activity): bool
    {
        if ($activity->status === 'draft' && $activity->created_by !== $authUser->id) {
-            return $authUser->hasRole('super_admin');
+            return $authUser->can('ViewDraft:Activity');
        }
        return $authUser->can('View:Activity');
    }