From b9572a76984451d207698927c6c05c5d1d1bfd4a Mon Sep 17 00:00:00 2001 From: root Date: Wed, 29 Jul 2026 19:32:17 -0400 Subject: [PATCH] fix permissions --- app/Config/Routes.php | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/app/Config/Routes.php b/app/Config/Routes.php index c549e9b..f0af02b 100644 --- a/app/Config/Routes.php +++ b/app/Config/Routes.php @@ -1069,12 +1069,14 @@ $routes->match(['get', 'post'], 'whatsapp/update-membership', 'View\WhatsappCont //Attendance -$routes->get('admin/teacher-attendance', 'View\AttendanceController::index', ['filter' => 'auth:admin']); -$routes->post('admin/teacher-attendance/save', 'View\AttendanceController::save', ['filter' => 'auth:admin']); +$staffAttendanceAccess = 'auth:admin|administrator|administrative staff|principal|vice principal'; + +$routes->get('admin/teacher-attendance', 'View\AttendanceController::index', ['filter' => $staffAttendanceAccess]); +$routes->post('admin/teacher-attendance/save', 'View\AttendanceController::save', ['filter' => $staffAttendanceAccess]); // NEW: monthly overview (all sections) -$routes->get('admin/teacher-attendance/month', 'View\AttendanceController::month', ['filter' => 'auth:admin']); -$routes->get('admin/teacher-attendance/month.csv', 'View\AttendanceController::monthCsv', ['filter' => 'auth:admin']); -$routes->get('api/admin/teacher-attendance/month', 'View\AttendanceController::monthData', ['filter' => 'auth:admin']); +$routes->get('admin/teacher-attendance/month', 'View\AttendanceController::month', ['filter' => $staffAttendanceAccess]); +$routes->get('admin/teacher-attendance/month.csv', 'View\AttendanceController::monthCsv', ['filter' => $staffAttendanceAccess]); +$routes->get('api/admin/teacher-attendance/month', 'View\AttendanceController::monthData', ['filter' => $staffAttendanceAccess]); $routes->post('attendance/record', 'View\AttendanceTrackingController::record');