🚀 مُصادَق: تحديث برمجي جديد 2026-05-03 03:15

app/Modules/Companies/CompanyController.php

@@ -17,7 +17,20 @@ final class CompanyController
 
     public function list(Request $request): void
     {
-        $companies = $this->companyModel->findByTenant($request->tenantId);
+        $tenantId = $request->tenantId;
+        $role = $request->user->role ?? 'viewer';
+        $assignedCompanyId = $request->user->assigned_company_id ?? null;
+
+        if ($role === 'super_admin') {
+            $companies = $this->companyModel->findByTenant($tenantId);
+        } else {
+            // Filter by assigned company
+            $db = \App\Core\Database::getInstance();
+            $stmt = $db->prepare("SELECT * FROM companies WHERE tenant_id = ? AND id = ? AND deleted_at IS NULL");
+            $stmt->execute([$tenantId, $assignedCompanyId]);
+            $companies = $stmt->fetchAll();
+        }
+
         Response::json([
             'success' => true,
             'data' => $companies