remove api.mangement

Author: Yoyasp

database/migrations/2026_04_10_120000_add_api_management_permission.php

@@ -36,9 +36,8 @@ public function run(): void
     {
         if (Role::query()->count() === 0) {
             $apiAccess = Permission::findOrCreate('api.access');
-            $apiManagement = Permission::findOrCreate('api.management');
 
-            Role::findOrCreate('admin')->givePermissionTo([$apiAccess, $apiManagement]);
+            Role::findOrCreate('admin')->givePermissionTo($apiAccess);
             Role::findOrCreate('global-read')->givePermissionTo($apiAccess);
             Role::findOrCreate('user');
         }

database/seeders/RolesSeeder.php

@@ -12,16 +12,7 @@
     exit(json_encode(['status' => 'error', 'message' => 'ERROR: Token name is required']));
 }
 
-$canManage = Gate::allows('api.management');
-
-if ($canManage && ! empty($_POST['user_id'])) {
-    $user = \App\Models\User::find($_POST['user_id']);
-    if (! $user) {
-        exit(json_encode(['status' => 'error', 'message' => 'ERROR: User not found']));
-    }
-} else {
-    $user = Auth::user();
-}
+$user = Auth::user();
 
 $expiresAt = null;
 $expiresIn = trim($_POST['expires_in'] ?? '');

includes/html/forms/v1-token-item-create.inc.php

@@ -12,16 +12,10 @@
     exit(json_encode(['status' => 'error', 'message' => 'ERROR: Invalid data']));
 }
 
-$canManage = Gate::allows('api.management');
-
-$query = \Laravel\Sanctum\PersonalAccessToken::where('id', $tokenId);
-
-if (! $canManage) {
-    $query->where('tokenable_id', Auth::id())
-          ->where('tokenable_type', \App\Models\User::class);
-}
-
-$token = $query->first();
+$token = \Laravel\Sanctum\PersonalAccessToken::where('id', $tokenId)
+    ->where('tokenable_id', Auth::id())
+    ->where('tokenable_type', \App\Models\User::class)
+    ->first();
 
 if (! $token) {
     exit(json_encode(['status' => 'error', 'message' => 'ERROR: Token not found']));

includes/html/forms/v1-token-item-remove.inc.php

@@ -17,16 +17,10 @@
     exit(json_encode(['status' => 'error', 'message' => 'ERROR: Days must be a positive number']));
 }
 
-$canManage = Gate::allows('api.management');
-
-$query = \Laravel\Sanctum\PersonalAccessToken::where('id', $tokenId);
-
-if (! $canManage) {
-    $query->where('tokenable_id', Auth::id())
-          ->where('tokenable_type', \App\Models\User::class);
-}
-
-$token = $query->first();
+$token = \Laravel\Sanctum\PersonalAccessToken::where('id', $tokenId)
+    ->where('tokenable_id', Auth::id())
+    ->where('tokenable_type', \App\Models\User::class)
+    ->first();
 
 if (! $token) {
     exit(json_encode(['status' => 'error', 'message' => 'ERROR: Token not found']));

includes/html/forms/v1-token-item-renew.inc.php

@@ -33,7 +33,6 @@ groups:
 
     api:
         - api.access
-        - api.management
 
     application:
         - application.update

resources/definitions/permissions.yaml

@@ -685,7 +685,7 @@ class="badge count-notif">{{ $notification_count }}</span> {{ __('Notifications'
                             </ul>
                         </li>
                         @endif
-                        @canany(['api.access', 'api.management'])
+                        @can('api.access')
                         <li role="presentation" class="divider"></li>
                         <li class="dropdown-submenu">
                             <a href="#"><i class="fa fa-code fa-fw fa-lg" aria-hidden="true"></i> {{ __('API') }}</a>
@@ -698,7 +698,7 @@ class="fa fa-book fa-fw fa-lg" aria-hidden="true"></i> {{ __('API Docs') }}</a>
                                 </li>
                             </ul>
                         </li>
-                        @endcanany
+                        @endcan
                         <li role="presentation" class="divider"></li>
                         <li class="dropdown-submenu" id="countdown_timer_menu" style="display: none">
                             <a href="#"><i class="fa fa-clock-o fa-fw fa-lg"></i> <span id="countdown_timer"></span></a>