fix: menu Riwayat Poin pindah ke seksi Administrasi, akses khusus admin (revoke semua role non-admin)

database/migrations/2026_08_03_091948_revoke_point_audit_non_admin.php

@@ -0,0 +1,36 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+return new class extends Migration
+{
+    /**
+     * Riwayat Poin khusus ADMIN: cabut akses dari semua role non-admin.
+     * Admin tetap bisa via User::isAdmin() (canPermission selalu true).
+     */
+    public function up(): void
+    {
+        $permissionId = DB::table('permissions')->where('key', 'view-point-audit')->value('id');
+        if (! $permissionId) {
+            return;
+        }
+
+        DB::table('role_permissions')->where('permission_id', $permissionId)->delete();
+    }
+
+    public function down(): void
+    {
+        $permissionId = DB::table('permissions')->where('key', 'view-point-audit')->value('id');
+        if (! $permissionId) {
+            return;
+        }
+
+        foreach (['bk', 'waka_kesiswaan', 'ketua_tim', 'kepala_sekolah', 'wali_kelas', 'staff'] as $role) {
+            DB::table('role_permissions')->updateOrInsert(
+                ['role' => $role, 'permission_id' => $permissionId],
+                ['created_at' => now(), 'updated_at' => now()]
+            );
+        }
+    }
+};