javier
a24c8a2c2e
- Restore UserTable/CompanyTable/ProjectTable usage in users, companies and projects-list pages (security commit had replaced them with plain HTML/DaisyUI tables, losing sorting/search/pagination/format) - Add missing User->company() belongsTo relationship (UserTable eager loads it; column + migration existed but relation was undefined) - Add #[Layout] attribute to CompanyManagement/ProjectList/PhaseProgress full-page Livewire components - Fix config/session.php: use env() instead of app()->environment() which fails during LoadConfiguration (env binding not yet registered) - Remove duplicate activeTab property in ProjectMap (fatal PHP error) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
44 lines
1.2 KiB
PHP
44 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace App\Livewire;
|
|
|
|
use Livewire\Component;
|
|
use Livewire\Attributes\Layout;
|
|
use Livewire\WithPagination;
|
|
use App\Models\Project;
|
|
use Illuminate\Support\Facades\Auth;
|
|
|
|
#[Layout('layouts.app')]
|
|
class ProjectList extends Component
|
|
{
|
|
use WithPagination;
|
|
|
|
public $search = '';
|
|
public $statusFilter = '';
|
|
|
|
public function deleteProject($id)
|
|
{
|
|
$user = Auth::user();
|
|
if (!$user->can('delete projects')) {
|
|
session()->flash('error', 'Sin permisos para eliminar proyectos.');
|
|
return;
|
|
}
|
|
// Scope to accessible projects to prevent IDOR (deleting another user's project by ID)
|
|
$project = Project::accessibleBy($user)->findOrFail($id);
|
|
$project->delete();
|
|
session()->flash('message', 'Proyecto eliminado');
|
|
}
|
|
|
|
public function render()
|
|
{
|
|
$query = Project::accessibleBy(Auth::user());
|
|
if ($this->search) {
|
|
$query->where('name', 'like', '%' . $this->search . '%');
|
|
}
|
|
if ($this->statusFilter) {
|
|
$query->where('status', $this->statusFilter);
|
|
}
|
|
$projects = $query->with('phases')->latest()->paginate(10);
|
|
return view('livewire.projects.project-list', ['projects' => $projects]);
|
|
}
|
|
} |