Update the ProgramPolicy

Signed-off-by: Kevin Ullyott <[email protected]>
canyongbs · Oct 21, 2024 · df7bc9f · df7bc9f
1 parent 0030321
commit df7bc9f
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/app-modules/student-data-model/src/Policies/ProgramPolicy.php b/app-modules/student-data-model/src/Policies/ProgramPolicy.php
@@ -53,7 +53,7 @@ public function viewAny(Authenticatable $authenticatable): Response
 
     public function view(Authenticatable $authenticatable, Program $program): Response
     {
-        if ($authenticatable->canAny('program.*.view', "student_record_manager.{$program->id}.view")) {
+        if ($authenticatable->canAny("program.{$program->id}.view", 'student_record_manager.*.view')) {
             return Response::allow();
         }
 
@@ -71,31 +71,31 @@ public function create(Authenticatable $authenticatable): Response
     public function update(Authenticatable $authenticatable, Program $program): Response
     {
         return $authenticatable->canOrElse(
-            abilities: "student_record_manager.{$program->id}.update",
+            abilities: 'student_record_manager.*.update',
             denyResponse: 'Programs cannot be updated.'
         );
     }
 
     public function delete(Authenticatable $authenticatable, Program $program): Response
     {
         return $authenticatable->canOrElse(
-            abilities: "student_record_manager.{$program->id}.delete",
+            abilities: 'student_record_manager.*.delete',
             denyResponse: 'Programs cannot be deleted.'
         );
     }
 
     public function restore(Authenticatable $authenticatable, Program $program): Response
     {
         return $authenticatable->canOrElse(
-            abilities: "student_record_manager.{$program->id}.restore",
+            abilities: 'student_record_manager.*.restore',
             denyResponse: 'Programs cannot be restored.'
         );
     }
 
     public function forceDelete(Authenticatable $authenticatable, Program $program): Response
     {
         return $authenticatable->canOrElse(
-            abilities: "student_record_manager.{$program->id}.force-delete",
+            abilities: 'student_record_manager.*.force-delete',
             denyResponse: 'Programs cannot be force deleted.'
         );
     }