diff --git a/app/Http/Controllers/Sales/SalesManagerController.php b/app/Http/Controllers/Sales/SalesManagerController.php index 91e354d8..3d0e1e3b 100644 --- a/app/Http/Controllers/Sales/SalesManagerController.php +++ b/app/Http/Controllers/Sales/SalesManagerController.php @@ -210,10 +210,15 @@ public function update(Request $request, int $id) } /** - * 삭제 처리 (비활성화) + * 삭제 처리 (비활성화) - 최고관리자만 가능 */ public function destroy(int $id) { + // 권한 체크: admin 역할만 삭제 가능 + if (!auth()->user()->isAdmin()) { + abort(403, '삭제 권한이 없습니다.'); + } + $partner = User::findOrFail($id); $partner->update(['is_active' => false]);