diff --git a/app/Http/Controllers/Api/Admin/HR/BusinessIncomePaymentController.php b/app/Http/Controllers/Api/Admin/HR/BusinessIncomePaymentController.php index 24932c62..456d3ed4 100644 --- a/app/Http/Controllers/Api/Admin/HR/BusinessIncomePaymentController.php +++ b/app/Http/Controllers/Api/Admin/HR/BusinessIncomePaymentController.php @@ -25,7 +25,10 @@ public function __construct( private function checkPayrollAccess(): ?JsonResponse { - if (! in_array(auth()->user()->name, self::ALLOWED_PAYROLL_USERS)) { + $isAllowedUser = in_array(auth()->user()->name, self::ALLOWED_PAYROLL_USERS); + $isDevSuperAdmin = ! app()->environment('production') && auth()->user()->isSuperAdmin(); + + if (! $isAllowedUser && ! $isDevSuperAdmin) { return response()->json([ 'success' => false, 'message' => '급여관리는 관계자만 볼 수 있습니다.', diff --git a/app/Http/Controllers/Api/Admin/HR/EmployeeSalaryController.php b/app/Http/Controllers/Api/Admin/HR/EmployeeSalaryController.php index 0a3957d9..417eb39e 100644 --- a/app/Http/Controllers/Api/Admin/HR/EmployeeSalaryController.php +++ b/app/Http/Controllers/Api/Admin/HR/EmployeeSalaryController.php @@ -13,7 +13,10 @@ class EmployeeSalaryController extends Controller private function checkSalaryAccess(): ?JsonResponse { - if (! in_array(auth()->user()->name, self::ALLOWED_SALARY_USERS)) { + $isAllowedUser = in_array(auth()->user()->name, self::ALLOWED_SALARY_USERS); + $isDevSuperAdmin = ! app()->environment('production') && auth()->user()->isSuperAdmin(); + + if (! $isAllowedUser && ! $isDevSuperAdmin) { return response()->json([ 'success' => false, 'message' => '연봉 정보는 권한이 있는 관계자만 열람할 수 있습니다.', diff --git a/app/Http/Controllers/Api/Admin/HR/PayrollController.php b/app/Http/Controllers/Api/Admin/HR/PayrollController.php index 8554a5d4..293117f6 100644 --- a/app/Http/Controllers/Api/Admin/HR/PayrollController.php +++ b/app/Http/Controllers/Api/Admin/HR/PayrollController.php @@ -32,7 +32,10 @@ public function __construct( private function checkPayrollAccess(): ?JsonResponse { - if (! in_array(auth()->user()->name, self::ALLOWED_PAYROLL_USERS)) { + $isAllowedUser = in_array(auth()->user()->name, self::ALLOWED_PAYROLL_USERS); + $isDevSuperAdmin = ! app()->environment('production') && auth()->user()->isSuperAdmin(); + + if (! $isAllowedUser && ! $isDevSuperAdmin) { return response()->json([ 'success' => false, 'message' => '급여관리는 관계자만 볼 수 있습니다.', diff --git a/app/Http/Controllers/HR/BusinessIncomePaymentController.php b/app/Http/Controllers/HR/BusinessIncomePaymentController.php index 608c7575..16a3c485 100644 --- a/app/Http/Controllers/HR/BusinessIncomePaymentController.php +++ b/app/Http/Controllers/HR/BusinessIncomePaymentController.php @@ -25,7 +25,10 @@ public function index(Request $request): View|Response return response('', 200)->header('HX-Redirect', route('hr.business-income-payments.index')); } - if (! in_array(auth()->user()->name, self::ALLOWED_PAYROLL_USERS)) { + $isAllowedUser = in_array(auth()->user()->name, self::ALLOWED_PAYROLL_USERS); + $isDevSuperAdmin = ! app()->environment('production') && auth()->user()->isSuperAdmin(); + + if (! $isAllowedUser && ! $isDevSuperAdmin) { return view('hr.payrolls.restricted'); } diff --git a/app/Http/Controllers/HR/EmployeeController.php b/app/Http/Controllers/HR/EmployeeController.php index 7d310515..7916e9f3 100644 --- a/app/Http/Controllers/HR/EmployeeController.php +++ b/app/Http/Controllers/HR/EmployeeController.php @@ -17,7 +17,10 @@ public function __construct( private function canViewSalary(): bool { - return in_array(auth()->user()->name, self::ALLOWED_SALARY_USERS); + $isAllowedUser = in_array(auth()->user()->name, self::ALLOWED_SALARY_USERS); + $isDevSuperAdmin = ! app()->environment('production') && auth()->user()->isSuperAdmin(); + + return $isAllowedUser || $isDevSuperAdmin; } /** diff --git a/app/Http/Controllers/HR/PayrollController.php b/app/Http/Controllers/HR/PayrollController.php index 4d21cee0..84d07789 100644 --- a/app/Http/Controllers/HR/PayrollController.php +++ b/app/Http/Controllers/HR/PayrollController.php @@ -26,7 +26,10 @@ public function index(Request $request): View|Response return response('', 200)->header('HX-Redirect', route('hr.payrolls.index')); } - if (! in_array(auth()->user()->name, self::ALLOWED_PAYROLL_USERS)) { + $isAllowedUser = in_array(auth()->user()->name, self::ALLOWED_PAYROLL_USERS); + $isDevSuperAdmin = ! app()->environment('production') && auth()->user()->isSuperAdmin(); + + if (! $isAllowedUser && ! $isDevSuperAdmin) { return view('hr.payrolls.restricted'); }