Files
sam-manage/app/Http/Controllers/HR/PayrollController.php
김보곤 48dc94c0b0 feat: [payroll] 급여관리 페이지 접근 제한 (이름 기반)
- 허용 사용자: 이경호, 전진선, 김보곤
- 웹 컨트롤러: 미허용 시 안내 뷰 반환
- API 컨트롤러: 모든 엔드포인트에 403 반환
- restricted.blade.php 안내 페이지 생성
2026-02-27 17:59:50 +09:00

48 lines
1.4 KiB
PHP

<?php
namespace App\Http\Controllers\HR;
use App\Http\Controllers\Controller;
use App\Models\HR\Payroll;
use App\Services\HR\PayrollService;
use Illuminate\Contracts\View\View;
use Illuminate\Http\Request;
use Illuminate\Http\Response;
class PayrollController extends Controller
{
private const ALLOWED_PAYROLL_USERS = ['이경호', '전진선', '김보곤'];
public function __construct(
private PayrollService $payrollService
) {}
/**
* 급여관리 페이지
*/
public function index(Request $request): View|Response
{
if ($request->header('HX-Request')) {
return response('', 200)->header('HX-Redirect', route('hr.payrolls.index'));
}
if (! in_array(auth()->user()->name, self::ALLOWED_PAYROLL_USERS)) {
return view('hr.payrolls.restricted');
}
$stats = $this->payrollService->getMonthlyStats();
$departments = $this->payrollService->getDepartments();
$employees = $this->payrollService->getActiveEmployees();
$settings = $this->payrollService->getSettings();
$statusMap = Payroll::STATUS_MAP;
return view('hr.payrolls.index', [
'stats' => $stats,
'departments' => $departments,
'employees' => $employees,
'settings' => $settings,
'statusMap' => $statusMap,
]);
}
}