feat: Restrict ledger creation exclusively to dynamic owners and fix route matching conflicts

2026-06-17 00:29:40 +02:00
parent d01091d5a6
commit ae6a4304f9
3 changed files with 59 additions and 2 deletions
@@ -16,8 +16,8 @@ Route::middleware(['auth', 'verified'])->group(function () {
    Route::get('/dynamics/{dynamic}/settings', [DynamicController::class, 'edit'])->name('dynamics.edit');
    Route::patch('/dynamics/{dynamic}/settings', [DynamicController::class, 'update'])->name('dynamics.update');

-    Route::resource('dynamics.ledgers', LedgerController::class)->scoped()->except(['create']);
    Route::get('/dynamics/{dynamic}/ledgers/create', [LedgerController::class, 'create'])->name('dynamics.ledgers.create');
+    Route::resource('dynamics.ledgers', LedgerController::class)->scoped()->except(['create']);

    Route::resource('dynamics.ledgers.mutations', MutationController::class)->scoped();