From 0c4fa0d0e7d44f2c904f4e38e788587c9b8b62b5 Mon Sep 17 00:00:00 2001
From: Sari <sari@openclaw.local>
Date: Mon, 3 Aug 2026 09:17:35 +0700
Subject: [PATCH] fix: grant view-point-audit ke
 ketua_tim/kepala_sekolah/wali_kelas/staff (produksi tidak punya user role bk)

---
 ...716_grant_point_audit_additional_roles.php | 40 +++++++++++++++++++
 1 file changed, 40 insertions(+)
 create mode 100644 database/migrations/2026_08_03_091716_grant_point_audit_additional_roles.php

diff --git a/database/migrations/2026_08_03_091716_grant_point_audit_additional_roles.php b/database/migrations/2026_08_03_091716_grant_point_audit_additional_roles.php
new file mode 100644
index 0000000..70e7f5e
--- /dev/null
+++ b/database/migrations/2026_08_03_091716_grant_point_audit_additional_roles.php
@@ -0,0 +1,40 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+return new class extends Migration
+{
+    /**
+     * Perluas akses view-point-audit ke role yang dipakai sekolah ini
+     * (tidak ada user role 'bk' di produksi — yang dipakai: ketua_tim,
+     * kepala_sekolah, wali_kelas, staff). Wali kelas tetap ter-scope ke kelasnya.
+     */
+    public function up(): void
+    {
+        $permissionId = DB::table('permissions')->where('key', 'view-point-audit')->value('id');
+        if (! $permissionId) {
+            return;
+        }
+
+        foreach (['ketua_tim', 'kepala_sekolah', 'wali_kelas', 'staff'] as $role) {
+            DB::table('role_permissions')->updateOrInsert(
+                ['role' => $role, 'permission_id' => $permissionId],
+                ['created_at' => now(), 'updated_at' => now()]
+            );
+        }
+    }
+
+    public function down(): void
+    {
+        $permissionId = DB::table('permissions')->where('key', 'view-point-audit')->value('id');
+        if (! $permissionId) {
+            return;
+        }
+
+        DB::table('role_permissions')
+            ->where('permission_id', $permissionId)
+            ->whereIn('role', ['ketua_tim', 'kepala_sekolah', 'wali_kelas', 'staff'])
+            ->delete();
+    }
+};