Editor Endpoint: Update Travel

Hi Povilas || Anyone else who sees this and can help,

I have a project where I am trying to use the comma seperated value to determine where multiple roles ('super-admin' and 'admin' roles, in this case) should have access to a particular route. Unfortunately, only one role (at a time) is going through, not more than one.

My test for this feature, keeps failing.

Here are my codes below.

Kindly help urgently. Thanks in advance.

C:...\tests\Feature\CategoryTest.php

public function test_admin_can_retrieve_categories()
{
            // $ADMIN_ROLE = 2;
    $admin = User::factory()->create(['role_id' => Role::ADMIN_ROLE]);
 
    $response = $this->actingAs($admin)->getJson('/api/v1/admin/categories');
 
    $response->assertStatus(200);
}

C:...\app\Http\Middleware\RoleMiddleware.php

public function handle(Request $request, Closure $next, string $roles): Response
{
    if (!auth()->check()) {
        abort(401);
    }
 
    $roles_array = explode('|', $roles);
 
    foreach ($roles_array as $role) {
        if (!auth()->user()->role()->where('name', $role)->exists()) {
            abort(403);
        }
    }
 
    return $next($request);
}

C:...\routes\api.php

Route::middleware(['auth:sanctum'])->group(function () {
 
        Route::prefix('admin')->group(function () {
 
                ...
 
                Route::middleware(['role:super-admin|admin'])->group(function () {
                        Route::apiResource('categories', Admin\CategoryController::class)->except(['store', 'update', 'destroy']);
                });
 
                ...
        });
});

Povilas, is there a way for the slug value to also be updated whenever we update the name value?

Also, since this is the requirement from the client:

A private (editor) endpoint to update a travel;

Why is admin also able to update a travel? shouldn't it be only the editor who's allowed to update?