diff --git a/app/Http/Controllers/GUI/AccessController.php b/app/Http/Controllers/GUI/AccessController.php index 559067d..a811052 100644 --- a/app/Http/Controllers/GUI/AccessController.php +++ b/app/Http/Controllers/GUI/AccessController.php @@ -57,6 +57,10 @@ class AccessController extends Controller abort(401); } + if($access->getApp()->user_cant_remove_app) { + abort(400, "App access cant remove for this app"); + } + RefreshToken::query()->where("access_id", "=", $access->id)->delete(); \App\Models\AccessToken::query()->where("access_id", "=", $access->id)->delete(); AppCode::query()->where("access_id", "=", $access->id)->delete(); diff --git a/app/Http/Controllers/GUI/AdminController.php b/app/Http/Controllers/GUI/AdminController.php index f3f1f9f..d697ac4 100644 --- a/app/Http/Controllers/GUI/AdminController.php +++ b/app/Http/Controllers/GUI/AdminController.php @@ -101,6 +101,7 @@ class AdminController extends Controller $app->untrusted_warning = (bool)$request->input("untrusted_warning", false); $app->show_on_webpage = (bool)$request->input("show_on_webpage", false); $app->hidden_in_app_list = (bool)$request->input("hidden_in_app_list", false); + $app->user_cant_remove_app = (bool)$request->input("user_cant_remove_app", false); $app->saveOrFail(); $app = App::query()->where("id", "=", $id)->first("*"); diff --git a/resources/views/access/list.php b/resources/views/access/list.php index 172125c..02e2d67 100644 --- a/resources/views/access/list.php +++ b/resources/views/access/list.php @@ -17,7 +17,14 @@ getApp()->name; ?> getApp()->description; ?> created_at->format("d.m.Y H:i"); ?> - Remove Access + + getApp()->user_cant_remove_app) { + echo 'Remove Access'; + } + ?> + + hidden_in_app_list) { echo 'checked="checked"'; } ?>> + + Disable remove Access + User can't remove Access to this App in the AppList + + user_cant_remove_app) { echo 'checked="checked"'; } ?>> + +