From 1494273efd996d1834fb74fae16c7dd1809946fc Mon Sep 17 00:00:00 2001
From: Malek Tellissi <malek@tellissi.com>
Date: Sun, 13 Sep 2026 02:44:00 +0200
Subject: [PATCH] Add viewer access to records and restrict activity log

- canView() + canViewAny() in EnforcesRoles: all SMS roles can view
- View pages for all 7 resources so viewers can open records read-only
- Custom ActivityResource restricts activity log to admin + manager only

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 app/Filament/User/Resources/ActivityResource.php      | 11 +++++++++++
 app/Filament/User/Resources/PackingResource.php       |  1 +
 .../Resources/PackingResource/Pages/ViewPacking.php   | 11 +++++++++++
 .../User/Resources/ProductInventoryResource.php       |  1 +
 .../Pages/ViewProductInventory.php                    | 11 +++++++++++
 app/Filament/User/Resources/ProductResource.php       |  1 +
 .../Resources/ProductResource/Pages/ViewProduct.php   | 11 +++++++++++
 app/Filament/User/Resources/ProductSaleResource.php   |  1 +
 .../ProductSaleResource/Pages/ViewProductSale.php     | 11 +++++++++++
 app/Filament/User/Resources/SpiceResource.php         |  1 +
 .../User/Resources/SpiceResource/Pages/ViewSpice.php  | 11 +++++++++++
 app/Filament/User/Resources/SpiceSupplierResource.php |  1 +
 .../SpiceSupplierResource/Pages/ViewSpiceSupplier.php | 11 +++++++++++
 app/Filament/User/Resources/SupplierResource.php      |  1 +
 .../Resources/SupplierResource/Pages/ViewSupplier.php | 11 +++++++++++
 app/Traits/EnforcesRoles.php                          | 10 ++++++++++
 config/filament-logger.php                            |  2 +-
 17 files changed, 106 insertions(+), 1 deletion(-)
 create mode 100644 app/Filament/User/Resources/ActivityResource.php
 create mode 100644 app/Filament/User/Resources/PackingResource/Pages/ViewPacking.php
 create mode 100644 app/Filament/User/Resources/ProductInventoryResource/Pages/ViewProductInventory.php
 create mode 100644 app/Filament/User/Resources/ProductResource/Pages/ViewProduct.php
 create mode 100644 app/Filament/User/Resources/ProductSaleResource/Pages/ViewProductSale.php
 create mode 100644 app/Filament/User/Resources/SpiceResource/Pages/ViewSpice.php
 create mode 100644 app/Filament/User/Resources/SpiceSupplierResource/Pages/ViewSpiceSupplier.php
 create mode 100644 app/Filament/User/Resources/SupplierResource/Pages/ViewSupplier.php

diff --git a/app/Filament/User/Resources/ActivityResource.php b/app/Filament/User/Resources/ActivityResource.php
new file mode 100644
index 0000000..d0c32a5
--- /dev/null
+++ b/app/Filament/User/Resources/ActivityResource.php
@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\User\Resources;
+
+class ActivityResource extends \Z3d0X\FilamentLogger\Resources\ActivityResource
+{
+    public static function canViewAny(): bool
+    {
+        return auth()->user()?->hasAnyRole(['sms-admin', 'sms-manager']) ?? false;
+    }
+}
diff --git a/app/Filament/User/Resources/PackingResource.php b/app/Filament/User/Resources/PackingResource.php
index 3982757..23cb5ac 100644
--- a/app/Filament/User/Resources/PackingResource.php
+++ b/app/Filament/User/Resources/PackingResource.php
@@ -82,6 +82,7 @@ class PackingResource extends Resource
         return [
             'index' => Pages\ListPackings::route('/'),
             'create' => Pages\CreatePacking::route('/create'),
+            'view' => Pages\ViewPacking::route('/{record}'),
             'edit' => Pages\EditPacking::route('/{record}/edit'),
         ];
     }
diff --git a/app/Filament/User/Resources/PackingResource/Pages/ViewPacking.php b/app/Filament/User/Resources/PackingResource/Pages/ViewPacking.php
new file mode 100644
index 0000000..dca6769
--- /dev/null
+++ b/app/Filament/User/Resources/PackingResource/Pages/ViewPacking.php
@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\User\Resources\PackingResource\Pages;
+
+use App\Filament\User\Resources\PackingResource;
+use Filament\Resources\Pages\ViewRecord;
+
+class ViewPacking extends ViewRecord
+{
+    protected static string $resource = PackingResource::class;
+}
diff --git a/app/Filament/User/Resources/ProductInventoryResource.php b/app/Filament/User/Resources/ProductInventoryResource.php
index e3522f1..dea948d 100644
--- a/app/Filament/User/Resources/ProductInventoryResource.php
+++ b/app/Filament/User/Resources/ProductInventoryResource.php
@@ -108,6 +108,7 @@ class ProductInventoryResource extends Resource
         return [
             'index' => Pages\ListProductInventory::route('/'),
             'create' => Pages\CreateProductInventory::route('/create'),
+            'view' => Pages\ViewProductInventory::route('/{record}'),
             'edit' => Pages\EditProductInventory::route('/{record}/edit'),
         ];
     }
diff --git a/app/Filament/User/Resources/ProductInventoryResource/Pages/ViewProductInventory.php b/app/Filament/User/Resources/ProductInventoryResource/Pages/ViewProductInventory.php
new file mode 100644
index 0000000..99e8112
--- /dev/null
+++ b/app/Filament/User/Resources/ProductInventoryResource/Pages/ViewProductInventory.php
@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\User\Resources\ProductInventoryResource\Pages;
+
+use App\Filament\User\Resources\ProductInventoryResource;
+use Filament\Resources\Pages\ViewRecord;
+
+class ViewProductInventory extends ViewRecord
+{
+    protected static string $resource = ProductInventoryResource::class;
+}
diff --git a/app/Filament/User/Resources/ProductResource.php b/app/Filament/User/Resources/ProductResource.php
index 3f138ff..b118068 100644
--- a/app/Filament/User/Resources/ProductResource.php
+++ b/app/Filament/User/Resources/ProductResource.php
@@ -242,6 +242,7 @@ class ProductResource extends Resource {
         return [
             'index'          => Pages\ListProducts::route('/'),
             'create'         => Pages\CreateProduct::route('/create'),
+            'view'           => Pages\ViewProduct::route('/{record}'),
             'edit'           => Pages\EditProduct::route('/{record}/edit'),
             'recipe-history' => Pages\RecipeHistory::route('/{record}/rezept-versionen'),
         ];
diff --git a/app/Filament/User/Resources/ProductResource/Pages/ViewProduct.php b/app/Filament/User/Resources/ProductResource/Pages/ViewProduct.php
new file mode 100644
index 0000000..b83f445
--- /dev/null
+++ b/app/Filament/User/Resources/ProductResource/Pages/ViewProduct.php
@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\User\Resources\ProductResource\Pages;
+
+use App\Filament\User\Resources\ProductResource;
+use Filament\Resources\Pages\ViewRecord;
+
+class ViewProduct extends ViewRecord
+{
+    protected static string $resource = ProductResource::class;
+}
diff --git a/app/Filament/User/Resources/ProductSaleResource.php b/app/Filament/User/Resources/ProductSaleResource.php
index 9c7a418..322cea8 100644
--- a/app/Filament/User/Resources/ProductSaleResource.php
+++ b/app/Filament/User/Resources/ProductSaleResource.php
@@ -115,6 +115,7 @@ class ProductSaleResource extends Resource {
         return [
             'index' => Pages\ListProductSales::route('/'),
             'create' => Pages\CreateProductSale::route('/create'),
+            'view' => Pages\ViewProductSale::route('/{record}'),
             'edit' => Pages\EditProductSale::route('/{record}/edit'),
         ];
     }
diff --git a/app/Filament/User/Resources/ProductSaleResource/Pages/ViewProductSale.php b/app/Filament/User/Resources/ProductSaleResource/Pages/ViewProductSale.php
new file mode 100644
index 0000000..d923f95
--- /dev/null
+++ b/app/Filament/User/Resources/ProductSaleResource/Pages/ViewProductSale.php
@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\User\Resources\ProductSaleResource\Pages;
+
+use App\Filament\User\Resources\ProductSaleResource;
+use Filament\Resources\Pages\ViewRecord;
+
+class ViewProductSale extends ViewRecord
+{
+    protected static string $resource = ProductSaleResource::class;
+}
diff --git a/app/Filament/User/Resources/SpiceResource.php b/app/Filament/User/Resources/SpiceResource.php
index f2cd20e..476adb2 100644
--- a/app/Filament/User/Resources/SpiceResource.php
+++ b/app/Filament/User/Resources/SpiceResource.php
@@ -94,6 +94,7 @@ class SpiceResource extends Resource
         return [
             'index' => Pages\ListSpices::route('/'),
             'create' => Pages\CreateSpice::route('/create'),
+            'view' => Pages\ViewSpice::route('/{record}'),
             'edit' => Pages\EditSpice::route('/{record}/edit'),
         ];
     }
diff --git a/app/Filament/User/Resources/SpiceResource/Pages/ViewSpice.php b/app/Filament/User/Resources/SpiceResource/Pages/ViewSpice.php
new file mode 100644
index 0000000..ef60cc8
--- /dev/null
+++ b/app/Filament/User/Resources/SpiceResource/Pages/ViewSpice.php
@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\User\Resources\SpiceResource\Pages;
+
+use App\Filament\User\Resources\SpiceResource;
+use Filament\Resources\Pages\ViewRecord;
+
+class ViewSpice extends ViewRecord
+{
+    protected static string $resource = SpiceResource::class;
+}
diff --git a/app/Filament/User/Resources/SpiceSupplierResource.php b/app/Filament/User/Resources/SpiceSupplierResource.php
index 00f25fa..41ab644 100644
--- a/app/Filament/User/Resources/SpiceSupplierResource.php
+++ b/app/Filament/User/Resources/SpiceSupplierResource.php
@@ -163,6 +163,7 @@ class SpiceSupplierResource extends Resource
         return [
             'index' => Pages\ListSpiceSuppliers::route('/'),
             'create' => Pages\CreateSpiceSupplier::route('/create'),
+            'view' => Pages\ViewSpiceSupplier::route('/{record}'),
             'edit' => Pages\EditSpiceSupplier::route('/{record}/edit'),
         ];
     }
diff --git a/app/Filament/User/Resources/SpiceSupplierResource/Pages/ViewSpiceSupplier.php b/app/Filament/User/Resources/SpiceSupplierResource/Pages/ViewSpiceSupplier.php
new file mode 100644
index 0000000..e214bcc
--- /dev/null
+++ b/app/Filament/User/Resources/SpiceSupplierResource/Pages/ViewSpiceSupplier.php
@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\User\Resources\SpiceSupplierResource\Pages;
+
+use App\Filament\User\Resources\SpiceSupplierResource;
+use Filament\Resources\Pages\ViewRecord;
+
+class ViewSpiceSupplier extends ViewRecord
+{
+    protected static string $resource = SpiceSupplierResource::class;
+}
diff --git a/app/Filament/User/Resources/SupplierResource.php b/app/Filament/User/Resources/SupplierResource.php
index 5afc539..0aee293 100644
--- a/app/Filament/User/Resources/SupplierResource.php
+++ b/app/Filament/User/Resources/SupplierResource.php
@@ -100,6 +100,7 @@ class SupplierResource extends Resource
         return [
             'index' => Pages\ListSuppliers::route('/'),
             'create' => Pages\CreateSupplier::route('/create'),
+            'view' => Pages\ViewSupplier::route('/{record}'),
             'edit' => Pages\EditSupplier::route('/{record}/edit'),
         ];
     }
diff --git a/app/Filament/User/Resources/SupplierResource/Pages/ViewSupplier.php b/app/Filament/User/Resources/SupplierResource/Pages/ViewSupplier.php
new file mode 100644
index 0000000..b22ca5d
--- /dev/null
+++ b/app/Filament/User/Resources/SupplierResource/Pages/ViewSupplier.php
@@ -0,0 +1,11 @@
+<?php
+
+namespace App\Filament\User\Resources\SupplierResource\Pages;
+
+use App\Filament\User\Resources\SupplierResource;
+use Filament\Resources\Pages\ViewRecord;
+
+class ViewSupplier extends ViewRecord
+{
+    protected static string $resource = SupplierResource::class;
+}
diff --git a/app/Traits/EnforcesRoles.php b/app/Traits/EnforcesRoles.php
index df2af12..3566d76 100644
--- a/app/Traits/EnforcesRoles.php
+++ b/app/Traits/EnforcesRoles.php
@@ -6,6 +6,16 @@ use Illuminate\Database\Eloquent\Model;
 
 trait EnforcesRoles
 {
+    public static function canViewAny(): bool
+    {
+        return auth()->user()?->hasAnyRole(['sms-admin', 'sms-manager', 'sms-viewer']) ?? false;
+    }
+
+    public static function canView(Model $record): bool
+    {
+        return auth()->user()?->hasAnyRole(['sms-admin', 'sms-manager', 'sms-viewer']) ?? false;
+    }
+
     public static function canCreate(): bool
     {
         return auth()->user()?->hasAnyRole(['sms-admin', 'sms-manager']) ?? false;
diff --git a/config/filament-logger.php b/config/filament-logger.php
index 8618b83..3ab43b4 100644
--- a/config/filament-logger.php
+++ b/config/filament-logger.php
@@ -3,7 +3,7 @@ return [
     'datetime_format' => 'd.m.Y H:i:s',
     'date_format' => 'd.m.Y',
 
-    'activity_resource' => \Z3d0X\FilamentLogger\Resources\ActivityResource::class,
+    'activity_resource' => \App\Filament\User\Resources\ActivityResource::class,
 
     'resources' => [
         'enabled' => true,