58 lines
1.6 KiB
PHP
58 lines
1.6 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\api;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Models\JudicialPrecedentNote;
|
|
use App\Traits\BaseApiResponse;
|
|
use Illuminate\Http\Request;
|
|
|
|
class JudicialPrecedentNoteController extends Controller
|
|
{
|
|
use BaseApiResponse;
|
|
|
|
public function create(Request $request)
|
|
{
|
|
$validated = $request->validate([
|
|
'judicial_precedent_id' => 'required',
|
|
'note' => 'required',
|
|
'color_code' => 'nullable',
|
|
]);
|
|
|
|
JudicialPrecedentNote::query()->create([
|
|
'user_id' => auth()->id(),
|
|
'judicial_precedent_id' => $validated['judicial_precedent_id'],
|
|
'note' => $validated['note'],
|
|
'color_code' => $validated['color_code'],
|
|
]);
|
|
|
|
return $this->success([], 'با موفقیت اضافه شد');
|
|
}
|
|
|
|
public function update($id, Request $request)
|
|
{
|
|
$validated = $request->validate([
|
|
'note' => 'required',
|
|
'color_code' => 'nullable',
|
|
]);
|
|
|
|
// SECURITY FIX: Only allow the owner of the note to update it
|
|
$note = JudicialPrecedentNote::where('user_id', auth()->id())->findOrFail($id);
|
|
|
|
$note->update([
|
|
'note' => $validated['note'],
|
|
'color_code' => $validated['color_code'],
|
|
]);
|
|
|
|
return $this->success([], 'بروز شد');
|
|
}
|
|
|
|
public function destroy($id)
|
|
{
|
|
$note = JudicialPrecedentNote::where('user_id', auth()->id())->findOrFail($id);
|
|
$note->delete();
|
|
|
|
return $this->success([], 'حذف شد');
|
|
}
|
|
}
|