api 创建公司 权限

routes/api.php

@@ -81,14 +81,14 @@ Route::middleware(['auth:sanctum','account.limit'])->group(function () {
 
     // Allow access only to admin role
     Route::middleware(['permission', 'role.super-admin', 'system.operation-log'])->group(function () {
-        Route::apiResource("company", API\CompanyController::class)->only([
-            'store','destroy','show'
-        ]);
+//        Route::apiResource("company", API\CompanyController::class)->only([
+//            'store','destroy','show'
+//        ]);
 
 
 //        Route::patch("user/userInfo/{user_id}",[API\UserController::class, 'updateUserInfo'])->name('user.updateUserInfo');
 
-        Route::post("company/action",[API\CompanyController::class,"action"])->name("company.action");
+//        Route::post("company/action",[API\CompanyController::class,"action"])->name("company.action");
         Route::get('system-operation-log', [API\SystemOperationLogController::class, 'index'])->name("system-operation-log.index");
 
     });
@@ -115,8 +115,9 @@ Route::middleware(['auth:sanctum','account.limit'])->group(function () {
             'approval' => API\ApprovalController::class,
         ]);
         Route::apiResource("company", API\CompanyController::class)->only([
-            'index', 'show', 'update'
+            'index', 'show', 'update','store','destroy'
         ]);
+        Route::post("company/action",[API\CompanyController::class,"action"])->name("company.action");
 
         Route::post ("department/userList", [API\DepartmentController::class, 'userList'])->name("department.userList");
         Route::post ("company/structure", [API\CompanyController::class, 'structure'])->name("company.structure");