shell bypass 403
<?php
namespace App\Http\Requests\Administrator;
use Illuminate\Foundation\Http\FormRequest;
class UpdateAdminRole extends FormRequest
{
/**
* Determine if the user is authorized to make this request.
*
* @return bool
*/
public function authorize(): bool
{
return $this->user()->can('edit roles');
}
/**
* Get the validation rules that apply to the request.
*
* @return array
*/
public function rules(): array
{
$role = $this->route('role');
return [
'name' => 'required|max:255|unique:roles,name,'.$role->id,
'permissions.*' => 'required',
];
}
}