97 lines
2.5 KiB
PHP
97 lines
2.5 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Admin;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use Illuminate\Http\Request;
|
|
use App\Models\User;
|
|
use Illuminate\Support\Facades\uth;
|
|
|
|
class UserController extends Controller
|
|
{
|
|
public function index()
|
|
{
|
|
$user = User::all();
|
|
return view('admin.user.index', compact('user'));
|
|
}
|
|
|
|
// FORM CREATE
|
|
public function create()
|
|
{
|
|
if(Auth::user()->role != 'admin'){
|
|
abort(403);
|
|
}
|
|
|
|
return view('admin.user.create');
|
|
}
|
|
|
|
// SIMPAN DATA
|
|
public function store(Request $request)
|
|
{
|
|
if(Auth::user()->role != 'admin'){
|
|
abort(403);
|
|
}
|
|
|
|
$request->validate([
|
|
'name' => 'required',
|
|
'email' => 'required|email|unique:users,email',
|
|
'password' => 'required|min:6',
|
|
'role' => 'required|in:rt' // 🔥 hanya boleh RT
|
|
]);
|
|
|
|
// 🔥 VALIDASI TAMBAHAN (ANTI NAKAL)
|
|
if ($request->role != 'rt') {
|
|
return back()->with('error', 'Hanya boleh menambahkan role RT!');
|
|
}
|
|
|
|
User::create([
|
|
'name' => $request->name,
|
|
'email' => $request->email,
|
|
'username' => $request->email, // biar aman
|
|
'password' => bcrypt($request->password),
|
|
'role' => 'rt'
|
|
]);
|
|
|
|
return redirect()->route('admin.user.index')
|
|
->with('success', 'User RT berhasil ditambahkan');
|
|
}
|
|
|
|
// 🔥 FORM EDIT
|
|
public function edit($id)
|
|
{
|
|
$user = \App\Models\User::findOrFail($id);
|
|
return view('admin.user.edit', compact('user'));
|
|
}
|
|
|
|
// 🔥 UPDATE DATA
|
|
// 🔥 UPDATE DATA
|
|
public function update(Request $request, $id)
|
|
{
|
|
$user = \App\Models\User::findOrFail($id);
|
|
|
|
$request->validate([
|
|
'name' => 'required|string|max:255',
|
|
'role' => 'required|in:admin,rt,user',
|
|
'username' => 'nullable|string|max:255|unique:users,username,' . $id,
|
|
]);
|
|
|
|
$user->update([
|
|
'name' => $request->name,
|
|
'role' => $request->role,
|
|
'username' => $request->username,
|
|
// ❌ email TIDAK diupdate karena field locked/disabled
|
|
]);
|
|
|
|
return redirect()->route('admin.user.index')
|
|
->with('success', 'Data user berhasil diupdate!');
|
|
}
|
|
|
|
public function destroy($id)
|
|
{
|
|
$user = \App\Models\User::findOrFail($id);
|
|
$user->delete();
|
|
|
|
return redirect()->route('admin.user.index')->with('success', 'User berhasil dihapus');
|
|
}
|
|
}
|