show 403 and error page when staff member tries to use pupil page

cranleighschool · Oct 14, 2024 · 913beb2 · 913beb2
1 parent 293e7a6
commit 913beb2
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/app/Domains/SelfReflection/Http/LookupController.php b/app/Domains/SelfReflection/Http/LookupController.php
@@ -10,6 +10,10 @@ class LookupController
     public function __invoke(int $reportCycle): RedirectResponse
     {
         $pupilData = new PupilData();
+        if (auth()->user()->isStaff()) {
+            abort(403, 'This page is intended for pupils and parents only. Staff should use the self-reflection page withing their Teaching Set in the pastoral module.');
+        }
+
 
         return redirect()->route('selfreflection.showget', ['reportCycle' => $reportCycle, 'pupilId' => $pupilData->pupil_id]);