From 7b069d6197aee96a0150aa93289a95e0f40be22b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=EA=B9=80=EB=B3=B4=EA=B3=A4?= Date: Mon, 2 Feb 2026 09:21:37 +0900 Subject: [PATCH] =?UTF-8?q?fix:=EC=98=81=EC=97=85=ED=8C=8C=ED=8A=B8?= =?UTF-8?q?=EB=84=88=20=EC=82=AD=EC=A0=9C=20=EA=B6=8C=ED=95=9C=20=EC=B2=B4?= =?UTF-8?q?=ED=81=AC=20=EC=B6=94=EA=B0=80=20-=20=EC=B5=9C=EA=B3=A0?= =?UTF-8?q?=EA=B4=80=EB=A6=AC=EC=9E=90=EB=A7=8C=20=EC=82=AD=EC=A0=9C=20?= =?UTF-8?q?=EA=B0=80=EB=8A=A5?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Opus 4.5 --- app/Http/Controllers/Sales/SalesManagerController.php | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/app/Http/Controllers/Sales/SalesManagerController.php b/app/Http/Controllers/Sales/SalesManagerController.php index 91e354d8..3d0e1e3b 100644 --- a/app/Http/Controllers/Sales/SalesManagerController.php +++ b/app/Http/Controllers/Sales/SalesManagerController.php @@ -210,10 +210,15 @@ public function update(Request $request, int $id) } /** - * 삭제 처리 (비활성화) + * 삭제 처리 (비활성화) - 최고관리자만 가능 */ public function destroy(int $id) { + // 권한 체크: admin 역할만 삭제 가능 + if (!auth()->user()->isAdmin()) { + abort(403, '삭제 권한이 없습니다.'); + } + $partner = User::findOrFail($id); $partner->update(['is_active' => false]);