authorizeAbility($request, 'admin.members.view'); $organization = $this->organization($request); $members = Member::owned($this->ownerRef($request)) ->where('organization_id', $organization->id) ->with('branch') ->orderBy('created_at') ->get(); return view('frontdesk.admin.members.index', [ 'members' => $members, 'organization' => $organization, 'roles' => config('frontdesk.roles'), ]); } public function create(Request $request): View { $this->authorizeAbility($request, 'admin.members.manage'); $organization = $this->organization($request); $branches = Branch::owned($this->ownerRef($request)) ->where('organization_id', $organization->id) ->where('is_active', true) ->orderBy('name') ->get(); return view('frontdesk.admin.members.create', [ 'organization' => $organization, 'branches' => $branches, 'roles' => config('frontdesk.roles'), ]); } public function store(Request $request): RedirectResponse { $this->authorizeAbility($request, 'admin.members.manage'); $organization = $this->organization($request); $validated = $request->validate([ 'user_ref' => ['required', 'string', 'max:255'], 'role' => ['required', 'string', 'in:'.implode(',', array_keys(config('frontdesk.roles')))], 'branch_id' => ['nullable', 'integer', 'exists:frontdesk_branches,id'], ]); Member::updateOrCreate( [ 'organization_id' => $organization->id, 'user_ref' => $validated['user_ref'], ], [ 'owner_ref' => $this->ownerRef($request), 'role' => $validated['role'], 'branch_id' => $validated['branch_id'] ?? null, ], ); return redirect()->route('frontdesk.members.index')->with('success', 'Member saved.'); } public function destroy(Request $request, Member $member): RedirectResponse { $this->authorizeAbility($request, 'admin.members.manage'); $this->authorizeOwner($request, $member); abort_if($member->user_ref === $this->ownerRef($request), 422, 'You cannot remove yourself.'); $member->delete(); return redirect()->route('frontdesk.members.index')->with('success', 'Member removed.'); } }