feature: set role previledge access

app/Http/Controllers/Api/UsersController.php

@@ -11,6 +11,7 @@ use App\Traits\GlobalApiResponse;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Hash;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Log;
 
 class UsersController extends Controller
 {

app/Http/Controllers/Auth/AuthenticatedSessionController.php

@@ -38,8 +38,6 @@ class AuthenticatedSessionController extends Controller
 
         // Buat token untuk API
         $token = $user->createToken(env('APP_KEY'))->plainTextToken;
-
-        // Simpan token di session (bisa digunakan di JavaScript)
         session(['api_token' => $token]);
 
         return redirect()->intended(RouteServiceProvider::HOME);

app/Http/Controllers/BusinessOrIndustriesController.php

@@ -4,15 +4,36 @@ namespace App\Http\Controllers;
 
 use App\Models\BusinessOrIndustry;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Auth;
 
 class BusinessOrIndustriesController extends Controller
 {
     /**
      * Display a listing of the resource.
      */
-    public function index()
+    public function index(Request $request)
     {
-        return view('business-industries.index');
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+        return view('business-industries.index', compact('creator', 'updater', 'destroyer'));
     }
 
     /**

app/Http/Controllers/CustomersController.php

@@ -4,12 +4,33 @@ namespace App\Http\Controllers;
 
 use App\Models\Customer;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
 
 class CustomersController extends Controller
 {
-    public function index()
+    public function index(Request $request)
     {
-        return view('customers.index');
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+
+        return view('customers.index', compact('creator', 'updater', 'destroyer'));
     }
     public function create()
     {

app/Http/Controllers/Data/AdvertisementController.php

@@ -6,15 +6,36 @@ use App\Http\Controllers\Controller;
 use App\Models\Advertisement;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Auth;
 
 class AdvertisementController extends Controller
 {
     /**
      * Display a listing of the resource.
      */
-    public function index()
+    public function index(Request $request)
     {
-        return view('data.advertisements.index');
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+
+        return view('data.advertisements.index', compact('creator', 'updater', 'destroyer'));
     }
 
     /**

app/Http/Controllers/Data/SpatialPlanningController.php

@@ -5,15 +5,37 @@ namespace App\Http\Controllers\Data;
 use App\Http\Controllers\Controller;
 use App\Models\SpatialPlanning;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Auth;
 
 class SpatialPlanningController extends Controller
 {
     /**
      * Display a listing of the resource.
      */
-    public function index()
+    public function index(Request $request)
     {
-        return view('data.spatialPlannings.index');
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+
+        return view('data.spatialPlannings.index', compact('creator', 'updater', 'destroyer'));
     }
 
     /**

app/Http/Controllers/Data/TourismController.php

@@ -6,15 +6,35 @@ use App\Http\Controllers\Controller;
 use App\Models\Tourism;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Auth;
 
 class TourismController extends Controller
 {
     /**
      * Display a listing of the resource
      */
-    public function index()
+    public function index(Request $request)
     {
-        return view('data.tourisms.index');
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+        return view('data.tourisms.index', compact('creator', 'updater', 'destroyer'));
     }
 
     /**

app/Http/Controllers/Data/UmkmController.php

@@ -6,15 +6,35 @@ use App\Http\Controllers\Controller;
 use App\Models\Umkm;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Auth;
 
 class UmkmController extends Controller
 {
     /**
      * Display a listing of the resource.
      */
-    public function index()
+    public function index(Request $request)
     {
-        return view('data.umkm.index');
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+        
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+        return view('data.umkm.index', compact('creator', 'updater', 'destroyer'));
     }
 
     /**

app/Http/Controllers/DataSettingController.php

@@ -8,15 +8,36 @@ use Exception;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Log;
 use Illuminate\Support\Facades\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Http\Request as IndexRequest;
 
 class DataSettingController extends Controller
 {
     /**
      * Display a listing of the resource.
      */
-    public function index()
+    public function index(IndexRequest $request)
     {
-        return view("data-settings.index");
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+        return view("data-settings.index", compact('creator', 'updater', 'destroyer'));
     }
 
     /**

app/Http/Controllers/Master/UsersController.php

@@ -13,6 +13,7 @@ use Illuminate\Support\Facades\Hash;
 use App\Models\User;
 use App\Traits\GlobalApiResponse;
 use Illuminate\Auth\Events\Registered;
+use Illuminate\Support\Facades\Auth;
 
 class UsersController extends Controller
 {
@@ -21,9 +22,29 @@ class UsersController extends Controller
         $users = User::all();
         return $this->resSuccess($users);
     }
-    public function index(){
+    public function index(Request $request){
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+
         $users = User::paginate();
-        return view('master.users.index', compact('users'));
+        return view('master.users.index', compact('users', 'creator', 'updater', 'destroyer'));
     }
     public function create(){
         $roles = Role::all();

app/Http/Controllers/MenusController.php

@@ -6,15 +6,36 @@ use App\Http\Requests\MenuRequest;
 use App\Models\Menu;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Auth;
 
 class MenusController extends Controller
 {
     /**
      * Display a listing of the resource.
      */
-    public function index()
+    public function index(Request $request)
     {
-        return view('menus.index');
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+
+        return view('menus.index', compact('creator', 'updater', 'destroyer'));
     }
 
     /**

app/Http/Controllers/RequestAssignment/PbgTaskController.php

@@ -5,15 +5,37 @@ namespace App\Http\Controllers\RequestAssignment;
 use App\Http\Controllers\Controller;
 use App\Models\PbgTask;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Auth;
 
 class PbgTaskController extends Controller
 {
     /**
      * Display a listing of the resource.
      */
-    public function index()
+    public function index(Request $request)
     {
-        return view('pbg_task.index');
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+
+        return view('pbg_task.index', compact('creator', 'updater', 'destroyer'));
     }
 
     /**

app/Http/Controllers/RolesController.php

@@ -10,15 +10,36 @@ use Illuminate\Http\Request;
 use Illuminate\Support\Facades\DB;
 use Illuminate\Support\Facades\Log;
 use Illuminate\Support\Facades\Schema;
+use Illuminate\Support\Facades\Auth;
 
 class RolesController extends Controller
 {
     /**
      * Display a listing of the resource.
      */
-    public function index()
+    public function index(Request $request)
     {
-        return view("roles.index");
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+
+        return view("roles.index", compact('creator', 'updater', 'destroyer'));
     }
 
     /**

app/Http/Controllers/Settings/SyncronizeController.php

@@ -13,7 +13,27 @@ class SyncronizeController extends Controller
         $this->service_simbg = $service_simbg;
     }
     public function index(Request $request){
-        return view('settings.syncronize.index');
+        $menuId = $request->query('menu_id');
+        $user = Auth::user();
+        $userId = $user->id;
+
+        // Ambil role_id yang dimiliki user
+        $roleIds = DB::table('user_role')
+            ->where('user_id', $userId)
+            ->pluck('role_id');
+
+        // Ambil data akses berdasarkan role_id dan menu_id
+        $roleAccess = DB::table('role_menu')
+            ->whereIn('role_id', $roleIds)
+            ->where('menu_id', $menuId)
+            ->first();
+
+        // Pastikan roleAccess tidak null sebelum mengakses properti
+        $creator = $roleAccess->allow_create ?? 0;
+        $updater = $roleAccess->allow_update ?? 0;
+        $destroyer = $roleAccess->allow_destroy ?? 0;
+
+        return view('settings.syncronize.index', compact('creator', 'updater', 'destroyer'));
     }
 
     public function syncPbgTask(){

resources/js/business-industries/index.js

@@ -31,6 +31,11 @@ class BusinessIndustries {
         let tableContainer = document.getElementById(
             "table-business-industries"
         );
+
+        tableContainer.innerHTML = "";
+        let canUpdate = tableContainer.getAttribute("data-updater") === "1";
+        let canDelete = tableContainer.getAttribute("data-destroyer") === "1";
+        
         // Create a new Grid.js instance only if it doesn't exist
         this.table = new Grid({
             columns: [
@@ -50,17 +55,30 @@ class BusinessIndustries {
                 { name: "Created", width: "180px" },
                 {
                     name: "Action",
-                    formatter: (cell) =>
+                    formatter: (cell) => {
-                        gridjs.html(`
+                        
-                                          <div class="d-flex justify-content-center gap-2">
+                        let buttons = `<div class="d-flex justify-content-center gap-2">`;
+                
+                        if (canUpdate) {
+                            buttons += `
                                 <a href="/data/business-industries/${cell}/edit" class="btn btn-yellow btn-sm d-inline-flex align-items-center justify-content-center">
                                     <i class='bx bx-edit'></i>
                                 </a>
+                            `;
+                        }
+                
+                        if (canDelete) {
+                            buttons += `
                                 <button data-id="${cell}" class="btn btn-sm btn-red btn-delete-business-industry d-inline-flex align-items-center justify-content-center">
                                     <i class='bx bxs-trash'></i>
                                 </button>
-                                          </div>
+                            `;
-                                      `),
+                        }
+                
+                        buttons += `</div>`;
+                
+                        return gridjs.html(buttons);
+                    },
                 },
             ],
             pagination: {

resources/js/customers/index.js

@@ -28,6 +28,10 @@ class Customers {
     initTableCustomers() {
         let tableContainer = document.getElementById("table-customers");
         // Create a new Grid.js instance only if it doesn't exist
+
+        tableContainer.innerHTML = "";
+        let canUpdate = tableContainer.getAttribute("data-updater") === "1";
+        let canDelete = tableContainer.getAttribute("data-destroyer") === "1";
         this.table = new Grid({
             columns: [
                 "ID",
@@ -39,17 +43,31 @@ class Customers {
                 "Longitude",
                 {
                     name: "Action",
-                    formatter: (cell) =>
+                    formatter: (cell) => {
-                        gridjs.html(`
+                        let buttons = "";
-                                  <div class="d-flex justify-content-center gap-2">
+        
+                        if (canUpdate) {
+                            buttons += `
                                 <a href="/data/customers/${cell}/edit" class="btn btn-yellow btn-sm d-inline-flex align-items-center justify-content-center">
                                     <i class='bx bx-edit'></i>
                                 </a>
+                            `;
+                        }
+        
+                        if (canDelete) {
+                            buttons += `
                                 <button data-id="${cell}" class="btn btn-sm btn-red btn-delete-customers d-inline-flex align-items-center justify-content-center">
                                     <i class='bx bxs-trash'></i>
                                 </button>
-                                  </div>
+                            `;
-                              `),
+                        }
+        
+                        if (!canUpdate && !canDelete) {
+                            buttons = `<span class="text-muted">No Privilege</span>`;
+                        }
+        
+                        return gridjs.html(`<div class="d-flex justify-content-center gap-2">${buttons}</div>`);
+                    },
                 },
             ],
             pagination: {

resources/js/data-settings/index.js

@@ -29,6 +29,10 @@ class DataSettings {
 
     initTableDataSettings() {
         let tableContainer = document.getElementById("table-data-settings");
+
+        tableContainer.innerHTML = "";
+        let canUpdate = tableContainer.getAttribute("data-updater") === "1";
+        let canDelete = tableContainer.getAttribute("data-destroyer") === "1"
         // Create a new Grid.js instance only if it doesn't exist
         this.table = new Grid({
             columns: [
@@ -40,16 +44,29 @@ class DataSettings {
                     name: "Actions",
                     width: "120px",
                     formatter: function (cell) {
-                        return gridjs.html(`
+                        let buttons = "";
-                            <div class="d-flex justify-content-center gap-2">
+        
+                        if (canUpdate) {
+                            buttons += `
                                 <a href="/data-settings/${cell}/edit" class="btn btn-yellow btn-sm d-inline-flex align-items-center justify-content-center">
                                     <i class='bx bx-edit'></i>
                                 </a>
+                            `;
+                        }
+        
+                        if (canDelete) {
+                            buttons += `
                                 <button class="btn btn-sm btn-red d-inline-flex align-items-center justify-content-center btn-delete-data-settings" data-id="${cell}">
                                     <i class='bx bxs-trash'></i>
                                 </button>
-                            </div>
+                            `;
-                        `);
+                        }
+        
+                        if (!canUpdate && !canDelete) {
+                            buttons = `<span class="text-muted">No Privilege</span>`;
+                        }
+        
+                        return gridjs.html(`<div class="d-flex justify-content-center gap-2">${buttons}</div>`);
                     },
                 },
             ],

resources/js/data/advertisements/data-advertisements.js

@@ -4,6 +4,11 @@ import "gridjs/dist/gridjs.umd.js";
 import GlobalConfig from "../../global-config.js";
 import GeneralTable from "../../table-generator.js";
 
+// Ambil hak akses dari data-attribute
+const tableElement = document.getElementById("reklame-data-table");
+const canUpdate = tableElement.getAttribute("data-updater") === "1";
+const canDelete = tableElement.getAttribute("data-destroyer") === "1";
+
 const dataAdvertisementsColumns = [
     "No",
     "Nama Wajib Pajak",
@@ -17,21 +22,39 @@ const dataAdvertisementsColumns = [
     "Kontak",
     {
         name: "Actions",
-        widht: "120px",
+        width: "120px",
         formatter: function(cell, row) {
             const id = row.cells[10].data;
             const model = "data/advertisements";
-            return gridjs.html(`
+            
-                <div class="d-flex justify-items-end gap-10">
+            let actionButtons = '<div class="d-flex justify-items-end gap-10">';
+            let hasPrivilege = false;
+    
+            // Tampilkan tombol Edit jika user punya akses update
+            if (canUpdate) {
+                hasPrivilege = true;
+                actionButtons += `
                     <button class="btn btn-warning me-2 btn-edit" 
                         data-id="${id}" 
                         data-model="${model}">
-                        <i class='bx bx-edit' ></i></button>
+                        <i class='bx bx-edit'></i>
+                    </button>`;
+            }
+    
+            // Tampilkan tombol Delete jika user punya akses delete
+            if (canDelete) {
+                hasPrivilege = true;
+                actionButtons += `
                     <button class="btn btn-red btn-delete" 
                         data-id="${id}">
-                            <i class='bx bxs-trash' ></i></button>
+                        <i class='bx bxs-trash'></i>
-                </div>
+                    </button>`;
-            `);
+            }
+    
+            actionButtons += '</div>';
+    
+            // Jika tidak memiliki akses, tampilkan teks "No Privilege"
+            return gridjs.html(hasPrivilege ? actionButtons : '<span class="text-muted">No Privilege</span>');
         }
     }
 ];

resources/js/data/spatialPlannings/data-spatialPlannings.js

@@ -4,6 +4,11 @@ import "gridjs/dist/gridjs.umd.js";
 import GlobalConfig from "../../global-config.js";
 import GeneralTable from "../../table-generator.js";
 
+// Ambil hak akses dari data-attribute
+const tableElement = document.getElementById("spatial-planning-data-table");
+const canUpdate = tableElement.getAttribute("data-updater") === "1";
+const canDelete = tableElement.getAttribute("data-destroyer") === "1";
+
 const dataSpatialPlanningColumns = [
     "No",
     "Nama",
@@ -19,18 +24,35 @@ const dataSpatialPlanningColumns = [
         formatter: function (cell, row) {
             const id = row.cells[8].data;
             const model = "data/spatial-plannings";
-            return gridjs.html(`
+
-                <div class="d-flex justify-items-end gap-10">
+            let actionButtons = '<div class="d-flex justify-items-end gap-10">';
+            let hasPrivilege = false;
+
+            // Tampilkan tombol Edit jika user punya akses update
+            if (canUpdate) {
+                hasPrivilege = true;
+                actionButtons += `
                     <button class="btn btn-warning me-2 btn-edit" 
                         data-id="${id}" 
                         data-model="${model}">
-                        <i class='bx bx-edit'></i></button>
+                        <i class='bx bx-edit'></i>
+                    </button>`;
+            }
 
+            // Tampilkan tombol Delete jika user punya akses delete
+            if (canDelete) {
+                hasPrivilege = true;
+                actionButtons += `
                     <button class="btn btn-red btn-delete" 
                         data-id="${id}">
-                        <i class='bx bxs-trash'></i></button>
+                        <i class='bx bxs-trash'></i>
-                </div>
+                    </button>`;
-            `);
+            }
+
+            actionButtons += '</div>';
+
+            // Jika tidak memiliki akses, tampilkan teks "No Privilege"
+            return gridjs.html(hasPrivilege ? actionButtons : '<span class="text-muted">No Privilege</span>');
         },
     },
 ];

resources/js/data/tourisms/data-tourisms.js

@@ -6,6 +6,12 @@ import GeneralTable from "../../table-generator.js";
 import L from "leaflet";
 import "leaflet/dist/leaflet.css";
 
+// Ambil hak akses dari data-attribute
+const tableElement = document.getElementById("tourisms-data-table");
+const canView = "1";
+const canUpdate = tableElement.getAttribute("data-updater") === "1";
+const canDelete = tableElement.getAttribute("data-destroyer") === "1";
+
 const dataTourismsColumns = [
     "No",
     "Nama Perusahaan",
@@ -27,23 +33,45 @@ const dataTourismsColumns = [
             const long = row.cells[9].data;
             const lat = row.cells[10].data;
             const model = "data/tourisms";
-            return gridjs.html(`
+
-                <div class="d-flex justify-items-end gap-10">
+            let actionButtons = '<div class="d-flex justify-items-end gap-10">';
+            let hasPrivilege = false;
+
+            // Tampilkan tombol View jika user punya akses view
+            if (canView) {
+                hasPrivilege = true;
+                actionButtons += `
+                <button class="btn btn-info me-2 btn-view" 
+                    data-long="${long}" data-lat="${lat}" data-district="${district}">
+                    <i class='bx bx-map'></i>
+                </button>`
+            }
+            
+            // Tampilkan tombol Edit jika user punya akses update
+            if (canUpdate) {
+                hasPrivilege = true;
+                actionButtons += `
                     <button class="btn btn-warning me-2 btn-edit"
                         data-id="${id}"
                         data-model="${model}">
-                        <i class='bx bx-edit'></i></button>
+                        <i class='bx bx-edit'></i>
-                    
+                    </button>`;
-                    <button class="btn btn-info me-2 btn-view" 
+            }
-                        data-long="${long}" data-lat="${lat}" data-district="${district}">
-                        <i class='bx bx-map'></i></button>
 
+            // Tampilkan tombol Delete jika user punya akses delete
+            if (canDelete) {
+                hasPrivilege = true;
+                actionButtons += `
                     <button class="btn btn-red btn-delete" 
                         data-id="${id}">
-                        <i class='bx bxs-trash'></i></button>
+                        <i class='bx bxs-trash'></i>
-                </div>
+                    </button>`
-            `);
+            }
-        },
+
+            actionButtons += '</div>';
+            // Jika tidak memiliki akses, tampilkan teks "No Privilege"
+            return gridjs.html(hasPrivilege ? actionButtons : '<span class="text-muted">No Privilege</span>');
+        }
     },
 ];
 

resources/js/data/umkm/data-umkm.js

@@ -3,6 +3,11 @@ import "gridjs/dist/gridjs.umd.js";
 import GlobalConfig from "../../global-config.js";
 import GeneralTable from "../../table-generator.js";
 
+// Ambil hak akses dari data-attribute
+const tableElement = document.getElementById("umkm-data-table");
+const canUpdate = tableElement.getAttribute("data-updater") === "1";
+const canDelete = tableElement.getAttribute("data-destroyer") === "1";
+
 const dataUMKMColumns = [
     "No",
     "Nama Usaha",
@@ -29,17 +34,35 @@ const dataUMKMColumns = [
         formatter: function(cell, row) {
             const id = row.cells[19].data;
             const model = "data/umkm";
-            return gridjs.html(`
+
-                <div class="d-flex justify-items-end gap-10">
+            let actionButtons = '<div class="d-flex justify-items-end gap-10">';
+            let hasPrivilege = false;
+    
+            // Tampilkan tombol Edit jika user punya akses update
+            if (canUpdate) {
+                hasPrivilege = true;
+                actionButtons += `
                     <button class="btn btn-warning me-2 btn-edit" 
                         data-id="${id}" 
                         data-model="${model}">
-                        <i class='bx bx-edit' ></i></button>
+                        <i class='bx bx-edit'></i>
+                    </button>`;
+            }
+    
+            // Tampilkan tombol Delete jika user punya akses delete
+            if (canDelete) {
+                hasPrivilege = true;
+                actionButtons += `
                     <button class="btn btn-red btn-delete" 
                         data-id="${id}">
-                            <i class='bx bxs-trash' ></i></button>
+                        <i class='bx bxs-trash'></i>
-                </div>
+                    </button>`;
-            `);
+            }
+    
+            actionButtons += '</div>';
+    
+            // Jika tidak memiliki akses, tampilkan teks "No Privilege"
+            return gridjs.html(hasPrivilege ? actionButtons : '<span class="text-muted">No Privilege</span>');
         }
     }
 ];

resources/js/master/users/users.js

@@ -9,6 +9,12 @@ class UsersTable {
     }
 
     initTableUsers() {
+        let tableContainer = document.getElementById(
+            "table-users"
+        );
+
+        tableContainer.innerHTML = "";
+        let canUpdate = tableContainer.getAttribute("data-updater") === "1";
         new Grid({
             columns: [
                 "ID",
@@ -20,14 +26,18 @@ class UsersTable {
                 "Roles",
                 {
                     name: "Action",
-                    formatter: (cell) =>
+                    formatter: (cell) =>{
-                        gridjs.html(`
+                        if (!canUpdate) {
+                            return gridjs.html(`<span class="text-muted">No Privilege</span>`);
+                        }
+                        return gridjs.html(`
                             <div class="d-flex justify-content-center">
                                 <a href="/master/users/${cell}/edit" class="btn btn-yellow btn-sm d-inline-flex align-items-center justify-content-center">
                                     <i class='bx bx-edit'></i>
                                 </a>
                             </div>
-                        `),
+                        `);
+                    },
                 },
             ],
             pagination: {

resources/js/menus/index.js

@@ -28,6 +28,9 @@ class Menus {
     initTableMenus() {
         let tableContainer = document.getElementById("table-menus");
 
+        tableContainer.innerHTML = "";
+        let canUpdate = tableContainer.getAttribute("data-updater") === "1";
+        let canDelete = tableContainer.getAttribute("data-destroyer") === "1";
         if (this.table) {
             // If table exists, update its data instead of recreating
             this.table
@@ -68,18 +71,33 @@ class Menus {
                 "Sort Order",
                 {
                     name: "Action",
-                    formatter: (cell) =>
+                    formatter: (cell) => {
-                        gridjs.html(`
+                        let buttons = `<div class="d-flex justify-content-center align-items-center gap-2">`;
-                        <div class="d-flex justify-content-center align-items-center gap-2">
+    
+                        if (canUpdate) {
+                            buttons += `
                                 <a href="/menus/${cell}/edit" class="btn btn-yellow btn-sm d-inline-flex align-items-center justify-content-center">
                                     <i class='bx bx-edit'></i>
                                 </a>
-                            <button data-id="${cell}"
+                            `;
-                            class="btn btn-red btn-sm btn-delete-menu d-inline-flex align-items-center justify-content-center">
+                        }
+    
+                        if (canDelete) {
+                            buttons += `
+                                <button data-id="${cell}" class="btn btn-red btn-sm btn-delete-menu d-inline-flex align-items-center justify-content-center">
                                     <i class='bx bxs-trash'></i>
                                 </button>
-                        </div>
+                            `;
-                      `),
+                        }
+    
+                        if (!canUpdate && !canDelete) {
+                            buttons += `<span class="text-muted">No Privilege</span>`;
+                        }
+    
+                        buttons += `</div>`;
+    
+                        return gridjs.html(buttons);
+                    },
                 },
             ],
             pagination: {

resources/js/pbg-task/index.js

@@ -9,6 +9,11 @@ class PbgTasks {
     }
 
     initTableRequestAssignment() {
+        let tableContainer = document.getElementById("table-pbg-tasks");
+
+        // Pastikan kontainer kosong sebelum merender ulang Grid.js
+        tableContainer.innerHTML = "";
+        let canUpdate = tableContainer.getAttribute("data-updater") === "1";
         new Grid({
             columns: [
                 "ID",
@@ -24,13 +29,24 @@ class PbgTasks {
                 {
                     name: "Action",
                     formatter: function (cell) {
+                        let tableContainer = document.getElementById("table-pbg-tasks");
+                        let canUpdate = tableContainer.getAttribute("data-updater") === "1";
+                
+                        if (!canUpdate) {
+                            return gridjs.html(`
+                                <span class="text-muted">No Privilege</span>
+                            `);
+                        }
+                
                         return gridjs.html(`
                             <div class="d-flex justify-content-center align-items-center gap-2">
-                                <a href="/pbg-task/${cell}" class="btn btn-yellow btn-sm d-inline-flex align-items-center justify-content-center">Detail</a
+                                <a href="/pbg-task/${cell}" class="btn btn-yellow btn-sm d-inline-flex align-items-center justify-content-center">
+                                    Detail
+                                </a>
                             </div>
                         `);
                     },
-                },
+                }
             ],
             search: {
                 server: {

resources/js/roles/index.js

@@ -27,6 +27,10 @@ class Roles {
 
     initTableRoles() {
         let tableContainer = document.getElementById("table-roles");
+
+        tableContainer.innerHTML = "";
+        let canUpdate = tableContainer.getAttribute("data-updater") === "1";
+        let canDelete = tableContainer.getAttribute("data-destroyer") === "1";
         // Create a new Grid.js instance only if it doesn't exist
         this.table = new gridjs.Grid({
             columns: [
@@ -35,20 +39,36 @@ class Roles {
                 "Description",
                 {
                 name: "Action",
-                    formatter: (cell) =>
+                formatter: (cell) => {
-                        gridjs.html(`
+                    let buttons = `<div class="d-flex justify-content-center gap-2">`;
-                            <div class="d-flex justify-content-center gap-2">
+
+                    if (canUpdate) {
+                        buttons += `
                             <a href="/roles/${cell}/edit" class="btn btn-yellow btn-sm d-inline-flex align-items-center justify-content-center">
                                 <i class='bx bx-edit'></i>
                             </a>
                             <a href="/roles/role-menu/${cell}" class="btn btn-primary btn-sm d-inline-flex align-items-center justify-content-center">
                                 Role Menu
                             </a>
+                        `;
+                    }
+
+                    if (canDelete) {
+                        buttons += `
                             <button data-id="${cell}" class="btn btn-sm btn-red btn-delete-role d-inline-flex align-items-center justify-content-center">
                                 <i class='bx bxs-trash'></i>
                             </button>
-                            </div>
+                        `;
-                        `),
+                    }
+
+                    if (!canUpdate && !canDelete) {
+                        buttons += `<span class="text-muted">No Privilege</span>`;
+                    }
+
+                    buttons += `</div>`;
+
+                    return gridjs.html(buttons);
+                },
             },
             ],
             pagination: {

resources/js/table-generator.js

@@ -12,6 +12,11 @@ class GeneralTable {
     }
 
     init() {
+        const tableContainer = document.getElementById(this.tableId);
+    
+        // Kosongkan container sebelum render ulang
+        tableContainer.innerHTML = "";
+    
         const table = new Grid({
             columns: this.columns,
             search: this.options.search || {
@@ -40,7 +45,7 @@ class GeneralTable {
             },
         });
     
-        table.render(document.getElementById(this.tableId));
+        table.render(tableContainer);
         this.handleActions();
     }
 

resources/views/business-industries/index.blade.php

@@ -15,9 +15,14 @@
 		<div class="card w-100">
 			<div class="card-body">
 				<div class="d-flex flex-wrap justify-content-end align-items-center mb-2">
+					@if ($creator)
 						<a href="{{ route('business-industries.create')}}" class="btn btn-success btn-sm d-block d-sm-inline w-auto">Upload</a>
+					@endif
+				</div>
+				<div id="table-business-industries"
+					data-updater="{{ $updater }}"
+					data-destroyer="{{ $destroyer }}">
 				</div>
-				<div id="table-business-industries"></div>
 			</div>
 		</div>
 	</div>

resources/views/customers/index.blade.php

@@ -15,10 +15,15 @@
         <div class="card w-100">
             <div class="card-body">
                 <div class="d-flex flex-wrap justify-content-end align-items-center mb-2">
+                    @if ($creator)
                         <a href="{{ route('customers.create')}}" class="btn btn-success btn-sm d-block d-sm-inline w-auto me-3">Create</a>
                         <a href="{{ route('customers.upload')}}" class="btn btn-success btn-sm d-block d-sm-inline w-auto">Upload</a>
+                    @endif
+                </div>
+                <div id="table-customers"
+                     data-updater="{{ $updater }}"
+                     data-destroyer="{{ $destroyer }}">
                 </div>
-                <div id="table-customers"></div>
             </div>
         </div>
     </div>

resources/views/data-settings/index.blade.php

@@ -15,9 +15,14 @@
 		<div class="card w-100">
 			<div class="card-body">
 				<div class="d-flex flex-wrap justify-content-end align-items-center mb-2">
+					@if ($creator)
 						<a href="{{ route('data-settings.create')}}" class="btn btn-success btn-sm d-block d-sm-inline w-auto">Create</a>
+					@endif
+				</div>
+				<div id="table-data-settings"
+                     data-updater="{{ $updater }}"
+                     data-destroyer="{{ $destroyer }}">
 				</div>
-				<div id="table-data-settings"></div>
 			</div>
 		</div>
 	</div>

resources/views/data/advertisements/index.blade.php

@@ -16,6 +16,7 @@
     <div class="card-body">
         <div class="row">
             <div class="d-flex justify-content-end gap-10 pb-3">
+                @if ($creator)
                     <button class="btn btn-success me-2 width-lg btn-create" data-model="data/advertisements">
                         <i class='bx bxs-file-plus'></i>
                         Create</button>
@@ -23,9 +24,13 @@
                         <i class='bx bx-upload' ></i>
                         Bulk Create
                     </button>
+                @endif
             </div>
             <div>
-                <div id="reklame-data-table"></div>
+                <div id="reklame-data-table"
+                     data-updater="{{ $updater }}"
+                     data-destroyer="{{ $destroyer }}">
+                </div>
             </div>
         </div>
     </div>

resources/views/data/spatialPlannings/index.blade.php

@@ -14,6 +14,7 @@
     <div class="card-body">
         <div class="row">
             <div class="d-flex justify-content-end gap-10 pb-3">
+                @if ($creator)
                     <button class="btn btn-success me-2 width-lg btn-create" data-model="data/spatial-plannings">
                         <i class='bx bxs-file-plus'></i>
                         Create</button>
@@ -21,9 +22,13 @@
                         <i class='bx bx-upload' ></i>
                         Bulk Create
                     </button>
+                @endif
             </div>
             <div>
-                <div id="spatial-planning-data-table"></div>
+                <div id="spatial-planning-data-table"
+                    data-updater="{{ $updater }}"
+                    data-destroyer="{{ $destroyer }}">
+                </div>
             </div>
         </div>
     </div>

resources/views/data/tourisms/index.blade.php

@@ -14,6 +14,7 @@
     <div class="card-body">
         <div class="row">
             <div class="d-flex justify-content-end gap-10 pb-3">
+                @if ($creator)
                     <button class="btn btn-success me-2 width-lg btn-create" data-model="data/tourisms">
                         <i class='bx bxs-file-plus'></i>
                         Create</button>
@@ -21,9 +22,13 @@
                         <i class='bx bx-upload' ></i>
                         Bulk Create
                     </button>
+                @endif
             </div>
             <div>
-                <div id="tourisms-data-table"></div>
+                <div id="tourisms-data-table"
+                    data-updater="{{ $updater }}"
+                    data-destroyer="{{ $destroyer }}">
+                </div>
             </div>
         </div>
     </div>

resources/views/data/umkm/index.blade.php

@@ -14,6 +14,7 @@
     <div class="card-body">
         <div class="row">
             <div class="d-flex justify-content-end gap-10 pb-3">
+                @if ($creator)
                     <button class="btn btn-success me-2 width-lg btn-create" data-model="data/umkm">
                         <i class='bx bxs-file-plus'></i>
                         Create</button>
@@ -21,9 +22,13 @@
                         <i class='bx bx-upload' ></i>
                         Bulk Create
                     </button>
+                @endif
             </div>
             <div>
-                <div id="umkm-data-table"></div>
+                <div id="umkm-data-table"
+                    data-updater="{{ $updater }}"
+                    data-destroyer="{{ $destroyer }}">
+                </div>
             </div>
         </div>
     </div>

resources/views/layouts/partials/sidebar.blade.php

@@ -16,58 +16,49 @@
           <ul class="navbar-nav" id="navbar-nav">
                <li class="menu-title">Menu</li>
 
-               @foreach ($menus as $menu)
+               @php
-                    <li class="nav-item">
+                    // Fungsi rekursif untuk menampilkan menu bertingkat dengan indentasi
-                         <!-- parent menu -->
+                    function renderMenu($menus, $depth = 0) {
-                         @if ($menu->parent_id == null)
+                         foreach ($menus as $menu) {
-                              <a class="nav-link menu-arrow" href="#sidebar-{{$menu->id}}" data-bs-toggle="collapse" role="button"
+                              $collapseId = "sidebar-" . $menu->id; // Unique ID untuk Bootstrap Collapse
-                                   aria-expanded="true" aria-controls="sidebar-{{$menu->id}}">
+                              $hasChildren = $menu->children->count() > 0; // Cek apakah punya anak
+                              $marginLeft = $depth * 10; // Set jarak margin berdasarkan level
+
+                              echo '<li class="nav-item" style="margin-left: ' . $marginLeft . 'px;">';
+
+                              // Menu utama / anak (dengan dropdown jika punya anak)
+                              echo '<a class="nav-link ' . ($hasChildren ? 'menu-arrow' : '') . '" 
+                                   href="' . ($hasChildren ? "#$collapseId" : ($menu->url ? (Route::has($menu->url) ? route($menu->url, ['menu_id' => $menu->id]) : $menu->url . '?menu_id=' . $menu->id) : '#')) . '" 
+                                   ' . ($hasChildren ? 'data-bs-toggle="collapse" role="button" aria-expanded="false" aria-controls="' . $collapseId . '"' : '') . '>
                                    <span class="nav-icon">
-                                        <iconify-icon icon="{{$menu->icon}}"></iconify-icon>
+                                        <iconify-icon icon="' . $menu->icon . '"></iconify-icon>
                                    </span>
-                                   <span class="nav-text">{{$menu->name}}</span>
+                                   <span class="nav-text">' . $menu->name . '</span>
-                              </a>
+                              </a>';
-                         @endif
+                              // Jika menu punya anak, buat sub-menu
-                         <!-- children menu foreach -->
+                              if ($hasChildren) {
-                         @if ($menu->children->count() > 0)
+                                   echo '<div class="collapse" id="' . $collapseId . '">
-                              <div class="collapse" id="sidebar-{{$menu->id}}">
+                                        <ul class="nav sub-navbar-nav">';
-                                   <ul class="nav sub-navbar-nav">
+                                   renderMenu($menu->children, $depth + 1); // Rekursi dengan level lebih dalam
-                                        @foreach ( $menu->children as $child)
+                                   echo '</ul></div>';
-                                             <li class="sub-nav-item">
+                              }
-                                                  <a class="sub-nav-link" href="{{ $child->url ? (Route::has($child->url) ? route($child->url) : $child->url) : '#' }}">
+
-                                                  {{ $child->name }}
+                              echo '</li>';
-                                                  </a>
+                         }
-                                             </li>
+                    }
-                                        @endforeach
+               @endphp
-                                   </ul>
+
-                              </div>
+               @php 
-                         @endif
+                    // Tampilkan hanya menu dengan parent_id NULL (menu utama)
-                    </li>
+                    renderMenu($menus->where('parent_id', null)); 
-               @endforeach
+               @endphp
           </ul>
      </div>
 </div>
 
-
+<!-- Efek Bintang -->
 <div class="animated-stars">
+     @for ($i = 0; $i < 20; $i++)
           <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
+     @endfor
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
-     <div class="shooting-star"></div>
 </div>

resources/views/master/users/index.blade.php

@@ -13,11 +13,16 @@
         <div class="card w-100">
             <div class="card-body">
                 <div class="d-flex flex-wrap justify-content-end align-items-center mb-2">
+                    @if ($creator)
                         <a href="{{ route('users.create') }}" class="btn btn-success btn-sm d-block d-sm-inline w-auto">
                             Create
                         </a>
+                    @endif
+                </div>
+                <div id="table-users"
+                     data-updater="{{ $updater }}"
+                     data-destroyer="{{ $destroyer }}">
                 </div>
-                <div id="table-users"></div>
             </div>
         </div>
     </div>

resources/views/menus/index.blade.php

@@ -16,10 +16,15 @@
         <div class="card w-100">
             <div class="card-body">
                 <div class="d-flex flex-wrap justify-content-end align-items-center mb-2">
+                    @if ($creator)
                         <a href="{{ route('menus.create')}}" class="btn btn-success btn-sm d-block d-sm-inline w-auto">Create</a>
+                    @endif
                 </div>
                 <div>
-                    <div id="table-menus"></div>
+                    <div id="table-menus"
+                        data-updater="{{ $updater }}"
+                        data-destroyer="{{ $destroyer }}">
+                    </div>
                 </div>
             </div>
         </div>

resources/views/pbg_task/index.blade.php

@@ -13,9 +13,14 @@
     <div class="card w-100">
       <div class="card-body">
         <div class="d-flex flex-wrap justify-content-end">
+          @if ($creator)
             <a href="{{ route('pbg-task.create')}}" class="btn btn-success btn-sm d-block d-sm-inline w-auto">Create</a>
+          @endif
+        </div>
+        <div id="table-pbg-tasks"
+					data-updater="{{ $updater }}"
+					data-destroyer="{{ $destroyer }}">
         </div>
-        <div id="table-pbg-tasks"></div>
       </div>
     </div>
   </div>

resources/views/roles/index.blade.php

@@ -16,9 +16,14 @@
         <div class="card w-100">
             <div class="card-body">
                 <div class="d-flex flex-wrap justify-content-end align-items-center mb-2">
+                    @if ($creator)
                         <a href="{{ route('roles.create')}}" class="btn btn-success btn-sm d-block d-sm-inline w-auto">Create</a>
+                    @endif
+                </div>
+                <div id="table-roles"
+                     data-updater="{{ $updater }}"
+                     data-destroyer="{{ $destroyer }}">
                 </div>
-                <div id="table-roles"></div>
             </div>
         </div>
     </div>

resources/views/settings/syncronize/index.blade.php

@@ -13,10 +13,12 @@
         <div class="card w-100">
             <div class="card-body">
                 <div class="d-flex flex-wrap justify-content-end gap-2">
+                    @if ($creator)
                         <button type="button" class="btn btn-success btn-sm d-block d-sm-inline w-auto" id="btn-sync-submit">
                             <span id="spinner" class="spinner-border spinner-border-sm me-1 d-none" role="status" aria-hidden="true"></span>    
                             Sync SIMBG
                         </button>
+                    @endif
                 </div>
                 <div>
                     <div id="table-import-datasources"></div>