complete Complete User Request Submission section RAD-1

2026-01-03 19:14:30 +03:30
commit 7137ec5792
393 changed files with 152602 additions and 0 deletions
@@ -0,0 +1,79 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Enums\UserEnum;
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Inertia\Inertia;
+
+class AuthController extends Controller
+{
+    public function login(Request $request)
+    {
+        if (Auth::check()) {
+            return redirect('/admin/dashboard');
+        }
+
+        return Inertia::admin('Auth/login');
+    }
+    public function loginAction(Request $request)
+    {
+        $request->validate([
+            'email' => 'required|max:255|email|exists:users,email',
+            'password' => 'required|min:8|max:255',
+        ]);
+
+        $data = $request->only(['email' , 'password']);
+
+
+
+        if (!Auth::attempt($data , $request->input('remember'))){
+            return response()->json([
+                'errors'=> [
+                    'email' => ['ایمیل و کلمه عبور شما با هم مطابقت ندارن']
+                ]
+            ] , 401);
+        }
+
+        $request->session()->regenerate();
+        return request()->json([
+            'message'
+        ] , 200);
+
+
+    }
+
+    public function register(Request $request)
+    {
+        if (Auth::check()) {
+            return redirect('/');
+        }
+        return Inertia::admin('Auth/register');
+    }
+
+    public function registerAction(Request $request)
+    {
+        $request->validate([
+            'name' => 'required|min:2|max:255',
+            'email' => 'required|max:255|email|unique:users,email',
+            'password' => 'required|min:8|max:255|confirmed',
+        ]);
+
+        $user = User::create([
+            'name' => $request->name,
+            'email' => $request->email,
+            'password' => Hash::make($request->password),
+            'level' => UserEnum::Admin->value,
+        ]);
+        Auth::login($user);
+        return redirect('/admin/dashboard');
+    }
+    public function logout(){
+        Auth::logout();
+        return redirect('/admin/auth/login');
+    }
+}
@@ -0,0 +1,263 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Models\Document;
+use App\Http\Resources\Admin\DocumentResource;
+use App\Http\Resources\Admin\DocumentEditFormResource;
+use Illuminate\Http\Request;
+use App\Enums\DocumentStatusEnum;
+use App\Enums\DocumentPriorityEnum;
+use Inertia\Inertia;
+use Maatwebsite\Excel\Facades\Excel;
+use App\Exports\DocumentExport;
+use App\Http\Resources\Admin\PetResource;
+use App\Models\Pet;
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
+use App\Http\Requests\Admin\DocumentRequest;
+use Illuminate\Support\Facades\Auth;
+use App\Services\FileStorageService;
+use App\Enums\MediaDiskEnum;
+
+class DocumentController extends Controller
+{
+    use AuthorizesRequests;
+
+    protected FileStorageService $fileStorageService;
+
+    public function __construct(FileStorageService $fileStorageService)
+    {
+        $this->fileStorageService = $fileStorageService;
+    }
+
+    public function index(Request $request)
+    {
+        $this->authorize('documents.index');
+
+        $lists = Document::with(['pet', 'requester'])
+            ->when(isset($request->search) , function ($query) use ($request){
+                $query->where(function ($q) use ($request) {
+                    $q->where('code', 'LIKE', "%{$request->search}%")
+                        ->orWhere('id', $request->search)
+                        ->orWhereHas('requester', function ($userQuery) use ($request) {
+                            $userQuery->where('fullname', 'LIKE', "%{$request->search}%")
+                            ->orWhere('username', 'LIKE', "%{$request->search}%")
+                            ->orWhere('email', 'LIKE', "%{$request->search}%")
+                            ->orWhere('phone', 'LIKE', "%{$request->search}%");
+                        });
+                });
+           })
+            ->when(isset($request->status), function ($query) use ($request) {
+                $query->where('status' , DocumentStatusEnum::fromName($request->status)->value );
+            })
+            ->when(isset($request->priority), function ($query) use ($request) {
+                $query->where('priority' , DocumentPriorityEnum::fromName($request->priority)->value);
+            })
+            ->when(isset($request->pet), function ($query) use ($request) {
+                $query->where('pet_id' , $request->pet);
+            })
+           ->latest()
+           ->paginate(20)
+           ->withQueryString()
+           ->onEachSide(1);
+
+        $documents = DocumentResource::collection($lists);
+
+
+        return Inertia::admin('Documents/index', [
+            'documents' => $documents,
+            'search' => $request->search,
+            'status' => $request->status,
+            'priority' => $request->priority,
+            'pet' => $request->pet,
+            'permissions_edit' => auth()->user()->can('documents.edit') ? false : true,
+            'permissions_delete' => auth()->user()->can('documents.delete') ? false : true,
+        ]);
+    }
+
+    public function create()
+    {
+        $this->authorize('documents.create');
+
+        $pets = PetResource::collection(Pet::latest()->take(20)->get())->map(function($pet) {
+            return [
+                'label' => $pet->name,
+                'value' => $pet->id
+            ];
+        });
+
+        return Inertia::admin('Documents/create_and_edit', [
+            'pets' => $pets,
+        ]);
+    }
+
+
+    public function store(DocumentRequest $request)
+    {
+        $this->authorize('documents.create');
+
+        $document = Document::create(
+            [
+                'status' => DocumentStatusEnum::fromName($request->status)->value,
+                'priority' => DocumentPriorityEnum::fromName($request->priority)->value,
+                'note' => $request->note,
+                'modality' => $request->modality,
+                'pet_id' => $request->pet_id,
+                'requester_id' => Auth::id(),
+                'submitted_at' => $request->submitted_at,
+                'scan_date' => $request->scan_date,
+                'processing_deadline' => $request->processing_deadline,
+            ]
+        );
+
+        if ($request->has('primary_files')) {
+            $primaryFileIds = $request->primary_files ?? [];
+            if (!empty($primaryFileIds)) {
+                $document->media()->attach($primaryFileIds, ['collection' => 'primary']);
+            }
+        }
+
+        if ($request->has('history_files')) {
+            $historyFileIds = $request->history_files ?? [];
+            if (!empty($historyFileIds)) {
+                $document->media()->attach($historyFileIds, ['collection' => 'history']);
+            }
+        }
+
+        session()->flash('success', 'پرونده با موفقیت ثبت شد');
+        return response(null , 200);
+
+    }
+
+
+    public function show(Document $document)
+    {
+        //
+    }
+
+
+    public function edit(Document $document)
+    {
+        $this->authorize('documents.edit');
+
+        $document->load(['primaryFiles', 'historyFiles', 'requester']);
+
+        $pets = PetResource::collection(Pet::latest()->take(20)->get())->map(function($pet) {
+            return [
+                'label' => $pet->name,
+                'value' => $pet->id
+            ];
+        });
+
+        return Inertia::admin('Documents/create_and_edit', [
+            'document' => DocumentEditFormResource::make($document)->resolve(),
+            'is_edit' => true,
+            'pets' => $pets,
+        ]);
+    }
+
+
+    public function update(DocumentRequest $request, Document $document)
+    {
+        $this->authorize('documents.edit');
+
+        $document->update(
+            [
+            'status' => DocumentStatusEnum::fromName($request->status)->value,
+            'priority' => DocumentPriorityEnum::fromName($request->priority)->value,
+            'note' => $request->note,
+            'modality' => $request->modality,
+            'pet_id' => $request->pet_id,
+            'requester_id' => Auth::id(),
+            'submitted_at' => $request->submitted_at,
+            'scan_date' => $request->scan_date,
+            'processing_deadline' => $request->processing_deadline,
+            ]
+        );
+
+        if ($request->has('primary_files')) {
+            $primaryFileIds = $request->primary_files ?? [];
+            $document->media()->wherePivot('collection', 'primary')->detach();
+            if (!empty($primaryFileIds)) {
+                $document->media()->attach($primaryFileIds, ['collection' => 'primary']);
+            }
+        }
+
+        if ($request->has('history_files')) {
+            $historyFileIds = $request->history_files ?? [];
+            $document->media()->wherePivot('collection', 'history')->detach();
+            if (!empty($historyFileIds)) {
+                $document->media()->attach($historyFileIds, ['collection' => 'history']);
+            }
+        }
+
+        session()->flash('success', 'پرونده با موفقیت بروزرسانی شد');
+        return response(null , 200);
+
+    }
+
+
+    public function destroy(Document $document)
+    {
+        $this->authorize('documents.delete');
+
+        $document->delete();
+        session()->flash('success', 'مدرک مورد نظر با موفقیت حذف شد.');
+        return response(null , 200);
+    }
+
+    public function exportData(Request $request)
+    {
+        $filters = $request->only(['status', 'priority', 'pet' , 'search']);
+        return Excel::download(new DocumentExport($filters), 'documents.xlsx');
+    }
+
+    public function uploadFile(Request $request)
+    {
+        $this->authorize('documents.create');
+
+        $request->validate([
+            'file' => 'required|file|max:20480',
+        ]);
+
+        $file = $request->file('file');
+        $medium = $this->fileStorageService->storeFile($file, MediaDiskEnum::Private->value, 'documents');
+
+        return response()->json($medium);
+    }
+
+    public function getOptions(Request $request)
+    {
+        $this->authorize('documents.index');
+
+
+        $lists = Document::with(['pet', 'requester'])
+            ->when(isset($request->search) && !empty($request->search), function ($query) use ($request){
+                $query->where(function ($q) use ($request) {
+                    $q->where('code', 'LIKE', "%{$request->search}%")
+                        ->orWhere('id', $request->search)
+                        ->orWhereHas('requester', function ($userQuery) use ($request) {
+                            $userQuery->where('fullname', 'LIKE', "%{$request->search}%")
+                            ->orWhere('username', 'LIKE', "%{$request->search}%")
+                            ->orWhere('email', 'LIKE', "%{$request->search}%")
+                            ->orWhere('phone', 'LIKE', "%{$request->search}%");
+                        });
+                });
+           })
+           ->latest()
+           ->take(20)
+           ->get(['id', 'code', 'modality']);
+
+        $options = $lists->map(function ($document) {
+            return [
+                'label' => "پرونده {$document->code} - {$document->modality}",
+                'value' => $document->id
+            ];
+        });
+        return response()->json([
+            'success' => true,
+            'data' => $options
+        ]);
+    }
+}
@@ -0,0 +1,63 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Models\Medium;
+use App\Services\FileStorageService;
+use Illuminate\Http\Request;
+use Inertia\Inertia;
+
+class MediumController extends Controller
+{
+    protected FileStorageService $fileStorageService;
+
+    public function __construct(FileStorageService $fileStorageService)
+    {
+        $this->fileStorageService = $fileStorageService;
+    }
+
+    public function index()
+    {
+        $medium = Medium::latest()->paginate(15);
+        return Inertia::admin('Medium', [
+            'medium' => $medium
+        ]);
+    }
+
+    public function store(Request $request)
+    {
+        $request->validate([
+            'file' => 'required|max:20240',
+        ]);
+
+        $file = $request->file('file');
+
+        $fileRecord = $this->fileStorageService->storeFile($file, 'public', 'media');
+
+        return response()->json($fileRecord);
+    }
+
+    public function destroy(Medium $media)
+    {
+        $this->fileStorageService->deleteMedium($media);
+        $media->delete();
+        return redirect()->back()->with('success', 'فایل مورد نظر با موفقیت حذف شد.');
+    }
+
+    public function getMedium()
+    {
+        $medium = Medium::latest()->paginate(15);
+        return response()->json($medium);
+    }
+
+    public function download(Medium $media)
+    {
+        return $this->fileStorageService->downloadFile($media);
+    }
+
+    public function serve(Medium $media)
+    {
+        return $this->fileStorageService->serveFile($media);
+    }
+}
@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use Inertia\Inertia;
+
+class PanelController extends Controller
+{
+    public function index(){
+        return Inertia::admin('index');
+    }
+}
@@ -0,0 +1,160 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Models\Pet;
+use App\Http\Resources\Admin\PetResource;
+use App\Http\Requests\Admin\PetRequest;
+use Illuminate\Http\Request;
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
+use Inertia\Inertia;
+use App\Exports\PetExport;
+use Maatwebsite\Excel\Facades\Excel;
+
+class PetController extends Controller
+{
+    use AuthorizesRequests;
+
+    public function index(Request $request)
+    {
+        $this->authorize('pets.index');
+
+        $lists = Pet::with(['owner'])
+        ->when(isset($request->search) , function ($query) use ($request){
+            $query->where(function ($q) use ($request) {
+                $q->where('name', 'LIKE', "%{$request->search}%")
+                    ->orWhere('id', $request->search);
+            });
+       })
+        ->when(isset($request->type) && $request->type != 'همه نوع ها', function ($query) use ($request) {
+            $query->whereIn('type' , $request->type);
+        })
+        ->when(isset($request->gender) && $request->gender != 'همه جنسیت ها', function ($query) use ($request) {
+            $query->where('gender' , $request->gender);
+        })
+       ->latest()
+       ->paginate(20)
+       ->withQueryString()
+       ->onEachSide(1);
+
+        $pets = PetResource::collection($lists);
+
+        return Inertia::admin('Pets/index', [
+            'pets' => $pets,
+            'search' => $request->search,
+            'type' => $request->type,
+            'gender' => $request->gender,
+            'permissions_edit' => auth()->user()->can('pets.edit') ? false : true,
+            'permissions_delete' => auth()->user()->can('pets.delete') ? false : true,
+        ]);
+    }
+
+
+    public function create()
+    {
+        $this->authorize('pets.create');
+        return Inertia::admin('Pets/create_and_edit');
+    }
+
+
+    public function store(PetRequest $request)
+    {
+        $this->authorize('pets.create');
+        auth()->user()->pets()->create([
+                'name' => $request->name,
+                'type' => $request->type,
+                'gender' => $request->gender,
+                'breed' => $request->breed,
+                'weight' => $request->weight,
+                'sterilized' => $request->sterilized,
+                'birthday' => $request->birthday,
+        ]);
+
+        session()->flash('success', 'کیس با موفقیت ثبت شد');
+        return response(null , 200);
+    }
+
+
+    public function show(Pet $pet)
+    {
+        //
+    }
+
+
+    public function edit(Pet $pet)
+    {
+        $this->authorize('pets.edit');
+        return Inertia::admin('Pets/create_and_edit', [
+            'pet' => PetResource::make($pet)->resource,
+            'is_edit' => true,
+        ]);
+    }
+
+
+    public function update(PetRequest $request, Pet $pet)
+    {
+        $this->authorize('pets.edit');
+        $pet->update([
+            'name' => $request->name,
+            'type' => $request->type,
+            'gender' => $request->gender,
+            'breed' => $request->breed,
+            'weight' => $request->weight,
+            'sterilized' => $request->sterilized,
+            'birthday' => $request->birthday,
+        ]);
+
+        session()->flash('success', 'کیس با موفقیت بروزرسانی شد');
+        return response(null , 200);
+    }
+
+
+    public function destroy(Pet $pet)
+    {
+        $this->authorize('pets.delete');
+        $pet->delete();
+
+        session()->flash('success', 'کیس با موفقیت حذف شد');
+        return response(null , 200);
+    }
+
+    public function bulkDelete(Request $request)
+    {
+        $this->authorize('pets.delete');
+        Pet::destroy($request->ids);
+        session()->flash('success', 'کیس های مورد نظر با موفقیت حذف شدند.');
+        return response(null , 200);
+    }
+
+    public function exportData(Request $request)
+    {
+        $filters = $request->only(['type', 'gender', 'search']);
+        return Excel::download(new PetExport($filters), 'pets.xlsx');
+    }
+
+    public function getOptions(Request $request)
+    {
+        $this->authorize('pets.index');
+
+        $lists = Pet::when(isset($request->search) , function ($query) use ($request){
+            $query->where('name', 'LIKE', "%{$request->search}%")
+                    ->orWhere('id', $request->search);
+       })
+       ->latest()
+       ->take(20)
+       ->get(['id', 'name']);
+
+        $options = $lists->map(function ($pet) {
+            return [
+                'label' => $pet->name,
+                'value' => $pet->id
+            ];
+        });
+
+        return response()->json([
+            'success' => true,
+            'data' => $options
+        ]);
+    }
+}
@@ -0,0 +1,106 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Http\Resources\Admin\ReportResource;
+use App\Models\Report;
+use Illuminate\Http\Request;
+use Inertia\Inertia;
+use App\Http\Requests\Admin\ReportRequest;
+use App\Enums\ReportStatusEnum;
+
+class ReportController extends Controller
+{
+
+    public function index(Request $request)
+    {
+        $lists = Report::with(['document', 'doctor'])
+        ->when(isset($request->search) , function ($query) use ($request){
+            $query->where(function ($q) use ($request) {
+                $q->where('id', 'LIKE', "%{$request->search}%")
+                    ->orWhereHas('document', function ($documentQuery) use ($request) {
+                        $documentQuery->where('code', 'LIKE', "%{$request->search}%");
+                    })
+                    ->orWhereHas('doctor', function ($userQuery) use ($request) {
+                        $userQuery->where('fullname', 'LIKE', "%{$request->search}%")
+                        ->orWhere('username', 'LIKE', "%{$request->search}%")
+                        ->orWhere('email', 'LIKE', "%{$request->search}%");
+                    });
+            });
+       })
+        ->when(isset($request->status) && $request->status != 'همه وضعیت ها', function ($query) use ($request) {
+            $query->where('status' , $request->status);
+        })
+       ->latest()
+       ->paginate(20)
+       ->withQueryString()
+       ->onEachSide(1);
+
+        $reports = ReportResource::collection($lists);
+
+        return Inertia::admin('Reports/index', [
+            'reports' => $reports,
+            'search' => $request->search,
+            'status' => $request->status,
+        ]);
+    }
+
+
+    public function create()
+    {
+        //
+    }
+
+
+    public function store(ReportRequest $request)
+    {
+        Report::create([
+            'document_id' => $request->document_id,
+            'doctor_id' => $request->doctor_id,
+            'status' => ReportStatusEnum::fromName($request->status)->value,
+            'body' => $request->body,
+            'submitted_at' => $request->submitted_at,
+        ]);
+
+        session()->flash('success', 'گزارش با موفقیت ثبت شد');
+        return response(null , 200);
+    }
+
+
+    public function show(Report $report)
+    {
+        //
+    }
+
+
+    public function edit(Report $report)
+    {
+        return Inertia::admin('Reports/edit', [
+            'report' => $report,
+        ]);
+    }
+
+
+    public function update(ReportRequest $request, Report $report)
+    {
+        $report->update([
+            'document_id' => $request->document_id,
+            'doctor_id' => $request->doctor_id,
+            'status' => ReportStatusEnum::fromName($request->status)->value,
+            'body' => $request->body,
+            'submitted_at' => $request->submitted_at,
+        ]);
+
+        session()->flash('success', 'گزارش با موفقیت ویرایش شد');
+        return response(null , 200);
+    }
+
+
+    public function destroy(Report $report)
+    {
+        $report->delete();
+        session()->flash('success', 'گزارش با موفقیت حذف شد');
+        return response(null , 200);
+    }
+}
@@ -0,0 +1,118 @@
+<?php
+
+namespace App\Http\Controllers\Admin\Role;
+
+use App\Exports\PermissionExport;
+use App\Http\Controllers\Controller;
+use App\Http\Resources\Admin\PermissionResource;
+use App\Models\Permission;
+use Illuminate\Http\Request;
+use Inertia\Inertia;
+use Maatwebsite\Excel\Facades\Excel;
+
+class PermissionController extends Controller
+{
+
+    public function index(Request $request)
+    {
+        $permissions = Permission::when(isset($request->search) , function ($query) use ($request){
+            $query->where(function ($q) use ($request) {
+                $q->where('name', 'LIKE', "%{$request->search}%")
+                    ->orWhere('label','LIKE', "%{$request->search}%");
+            });
+        })
+        ->latest()
+        ->paginate(20)
+        ->withQueryString()
+        ->onEachSide(1);
+
+        return Inertia::admin('Permissions/index', [
+            'permissions' => PermissionResource::collection($permissions),
+            'search' => $request->search,
+        ]);
+    }
+
+    public function create()
+    {
+        $permissions = Permission::latest()->where('parent_id' , 0)->get();
+        return Inertia::admin('Permissions/create_and_edit', [
+            'permissions' => PermissionResource::collection($permissions),
+        ]);
+    }
+
+    public function store(Request $request)
+    {
+        $valid = $request->validate([
+            'name' => ['required' , 'max:255'],
+            'label' => ['required' , 'max:255'],
+        ]);
+
+        Permission::create([
+            'name' => $valid['name'],
+            'label' => $valid['label'],
+            'parent_id' => $request->parent_id ?? 0,
+        ]);
+
+        session()->flash('success', 'سطح جدید با موفقیت ایجاد شد.');
+
+        return response(null , 201);
+    }
+
+    public function bulkDelete(Request $request)
+    {
+        Permission::destroy($request->ids);
+        session()->flash('success', 'سطح های مورد نظر با موفقیت حذف شدند.');
+        return response(null , 200);
+    }
+
+    public function exportData(Request $request)
+    {
+        $filters = $request->only(['search']);
+        return Excel::download(new PermissionExport($filters), 'permissions.xlsx');
+    }
+
+    public function show(Permission $permission)
+    {
+        //
+    }
+
+    public function edit(Permission $permission)
+    {
+        $permissions = Permission::latest()->where('parent_id' , 0)->get();
+        return Inertia::admin('Permissions/create_and_edit', [
+            'permission' => [
+                'id' => $permission->id,
+                'name' => $permission->name,
+                'label' => $permission->label,
+                'parent_id' => $permission->parent_id,
+                'created_at' => optional($permission->created_at)->format('Y-m-d H:i:s'),
+            ],
+            'permissions' => PermissionResource::collection($permissions),
+            'is_edit' => true,
+        ]);
+    }
+
+    public function update(Request $request, Permission $permission)
+    {
+        $valid = $request->validate([
+            'name' => ['required' , 'max:255'],
+            'label' => ['required' , 'max:255'],
+        ]);
+
+        $permission->update([
+            'name' => $valid['name'],
+            'label' => $valid['label'],
+            'parent_id' => $request->parent_id ?? 0,
+        ]);
+
+        session()->flash('success', 'سطح مورد نظر با موفقیت بروزرسانی شد.');
+        return response(null , 200);
+    }
+
+    public function destroy(Permission $permission)
+    {
+        $permission->delete();
+        session()->flash('success', 'سطح مورد نظر با موفقیت حذف شد.');
+        return response(null , 200);
+    }
+}
@@ -0,0 +1,148 @@
+<?php
+
+namespace App\Http\Controllers\Admin\Role;
+
+use App\Exports\RolesExport;
+use App\Http\Controllers\Controller;
+use App\Http\Resources\Admin\RoleResource;
+use App\Models\Permission;
+use Inertia\Inertia;
+use Maatwebsite\Excel\Facades\Excel;
+use Spatie\Permission\Models\Role;
+use Illuminate\Http\Request;
+
+class RoleController extends Controller
+{
+    public function index(Request $request)
+    {
+        $roles = Role::when(isset($request->search) , function ($query) use ($request){
+            $query->where(function ($q) use ($request) {
+                $q->where('name', 'LIKE', "%{$request->search}%")
+                    ->orWhere('label','LIKE', "%{$request->search}%");
+            });
+        })
+        ->latest()
+        ->paginate(20)
+        ->withQueryString()
+        ->onEachSide(1);
+
+        return Inertia::admin('Roles/index', [
+            'roles' => RoleResource::collection($roles),
+            'search' => $request->search,
+        ]);
+    }
+
+    public function create()
+    {
+        $permissions = Permission::latest()->where('parent_id' , 0)->with(['permissionsParent'])->get();
+        return Inertia::admin('Roles/create_and_edit', [
+            'permissions' => $permissions,
+        ]);
+    }
+
+    public function store(Request $request)
+    {
+        $valid = $request->validate([
+            'name' => ['required' , 'max:255'],
+            'label' => ['required' , 'max:255'],
+        ]);
+
+        $role = Role::create([
+            'name' => $valid['name'],
+            'label' => $valid['label'],
+        ]);
+
+        if ($request->selectedPermissionIds) {
+            $ids = collect($request->selectedPermissionIds)
+            ->flatten()
+            ->unique()
+            ->toArray();
+            $role->syncPermissions($ids);
+        }
+
+
+        session()->flash('success', 'مقام جدید با موفقیت ایجاد شد.');
+
+        return response(null , 201);
+    }
+
+    public function bulkDelete(Request $request)
+    {
+        Role::destroy($request->ids);
+
+        session()->flash('success', 'مقام های مورد نظر با موفقیت حذف شدند.');
+        return response(null , 200);
+    }
+
+    public function exportData(Request $request)
+    {
+        $filters = $request->only(['search']);
+        return Excel::download(new RolesExport($filters), 'roles.xlsx');
+    }
+
+    public function show(Role $role)
+    {
+        //
+    }
+
+    public function edit(Role $role)
+    {
+        $permissions = Permission::latest()
+            ->where('parent_id', 0)
+            ->with(['permissionsParent'])
+            ->get();
+
+        $selectedPermissionIds = $role->permissions
+            ->groupBy(function($permission) {
+                return $permission->parent_id ?: $permission->id;
+            })
+            ->map(function($group) {
+                return $group->pluck('id')->toArray();
+            })
+            ->toArray();
+
+
+        return Inertia::admin('Roles/create_and_edit', [
+            'role' => [
+                'id' => $role->id,
+                'name' => $role->name,
+                'label' => $role->label,
+                'permissions' => $selectedPermissionIds,
+                'created_at' => optional($role->created_at)->format('Y-m-d H:i:s'),
+            ],
+            'permissions' => $permissions,
+            'is_edit' => true,
+        ]);
+    }
+
+    public function update(Request $request, Role $role)
+    {
+        $valid = $request->validate([
+            'name' => ['required' , 'max:255'],
+            'label' => ['required' , 'max:255'],
+        ]);
+
+        $role->update([
+            'name' => $valid['name'],
+            'label' => $valid['label'],
+        ]);
+
+        if ($request->selectedPermissionIds) {
+            $ids = collect($request->selectedPermissionIds)
+                ->flatten()
+                ->unique()
+                ->toArray();
+            $role->syncPermissions($ids);
+        }
+
+        session()->flash('success', 'مقام مورد نظر با موفقیت بروزرسانی شد.');
+        return response(null , 200);
+    }
+
+    public function destroy(Role $role)
+    {
+        $role->delete();
+        session()->flash('success', 'مقام مورد نظر با موفقیت حذف شد.');
+        return response(null , 200);
+    }
+}
@@ -0,0 +1,113 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Admin\SettingProfileRequest;
+use App\Http\Resources\Admin\SessionsIndexResource;
+use App\Models\Medium;
+use App\Models\Session;
+use App\Models\User;
+use App\Services\FileStorageService;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Hash;
+use Inertia\Inertia;
+
+class SettingUserController extends Controller
+{
+    protected FileStorageService $fileStorageService;
+
+    public function __construct(FileStorageService $fileStorageService)
+    {
+        $this->fileStorageService = $fileStorageService;
+    }
+
+    public function profile()
+    {
+        return Inertia::admin('Settings/User/Profile', []);
+    }
+    public function updateData(SettingProfileRequest $request , User $user)
+    {
+        if (Auth::id() !== $request->route('user')->id) {
+            abort(403);
+        }
+        $user->update($request->validated());
+        return response($user, 200);
+    }
+    public function uploadAvatar(Request $request){
+        $request->validate([
+            'file' => 'required|mimes:png,jpg,jpeg,gif|max:10240'
+        ]);
+
+        $user = Auth::user();
+
+        if (!empty($user->profile_url)) {
+            if ($file = Medium::where('url', $user->profile_url)->first()) {
+                $this->fileStorageService->deleteMedium($file);
+            }
+        }
+
+        $file = $request->file('file');
+        $fileRecord = $this->fileStorageService->storeFile($file, 'public', 'profile');
+
+        $user->update(['profile_url' => $fileRecord->url]);
+
+        return response(['profile_url' => $fileRecord->url], 200);
+    }
+
+    public function security()
+    {
+        return Inertia::admin('Settings/User/Security', []);
+    }
+
+    public function sessions()
+    {
+        $userSessions = Session::where('user_id', Auth::id())->get();
+        $sessions = SessionsIndexResource::collection($userSessions)->toArray(request());
+        return Inertia::admin('Settings/User/Sessions', compact('sessions'));
+    }
+    public function deleteSession(Session $session){
+        $state = Session::where([
+            'id' => $session->id,
+            'user_id' => Auth::id(),
+        ])->delete();
+
+        if ($state){
+            session()->flash('success', 'نشست مورد نظر حذف شد');
+            return response(null, 200);
+        }else{
+            session()->flash('error', 'نشست مورد نظر یافت نشد!');
+            return response(null, 400);
+        }
+    }
+    public function bulkDelete(Request $request)
+    {
+        Session::whereIn('id', $request->ids)->delete();
+        session()->flash('success', 'نشست های مورد نظر با موفقیت حذف شدند.');
+        return response(null, 200);
+    }
+
+    public function changePassword(Request $request)
+    {
+        $fields = $request->validate([
+            'password' => 'required|min:8',
+            'newPassword' => 'required|min:8|confirmed',
+        ]);
+        $user = Auth::user();
+
+        if (!Hash::check($fields['password'], $user->password)){
+            return response()->json([
+                'message' => 'پسورد فعلی نادرست است'
+            ], 401);
+        }
+
+        $user->update([
+            'password' => Hash::make($fields['newPassword']),
+        ]);
+
+        session()->flash('success', 'تغییر کلمه عبور با موفقیت انجام شد.');
+        return response(null, 200);
+    }
+
+}
@@ -0,0 +1,184 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Exports\UsersExport;
+use App\Http\Controllers\Controller;
+use App\Http\Requests\Admin\UserRequest;
+use App\Http\Resources\Admin\UserResource;
+use App\Models\User;
+use Illuminate\Http\Request;
+use Illuminate\Support\Carbon;
+use Illuminate\Support\Facades\Hash;
+use Inertia\Inertia;
+use Maatwebsite\Excel\Facades\Excel;
+use Spatie\Permission\Models\Role;
+use App\Enums\UserEnum;
+
+class UserController extends Controller
+{
+
+    public function index(Request $request)
+    {
+         $lists = User::when(isset($request->search) , function ($query) use ($request){
+             $query->where(function ($q) use ($request) {
+                 $q->where('username', 'LIKE', "%{$request->search}%")
+                     ->orWhere('phone', 'LIKE', "%{$request->search}%")
+                     ->orWhere('fullname', 'LIKE', "%{$request->search}%")
+                     ->orWhere('email','LIKE', "%{$request->search}%");
+             });
+        })
+         ->when(isset($request->level) && $request->level != 'همه سطح ها', function ($query) use ($request) {
+             $query->where('level' , $request->level);
+         })
+        ->latest()
+        ->paginate(20)
+        ->withQueryString()
+        ->onEachSide(1);
+        $users = UserResource::collection($lists);
+
+
+        return Inertia::admin('Users/index', [
+            'users' => $users,
+            'search' => $request->search,
+            'level' => $request->level,
+        ]);
+    }
+
+    public function bulkDelete(Request $request)
+    {
+        User::destroy($request->ids);
+        session()->flash('success', 'کاربر های مورد نظر با موفقیت حذف شدند.');
+        return response(null , 200);
+    }
+
+    public function exportData(Request $request)
+    {
+        $filters = $request->only(['level', 'search']);
+        return Excel::download(new UsersExport($filters), 'users.xlsx');
+    }
+
+
+    public function create()
+    {
+        $roles = Role::latest()->get();
+        return Inertia::admin('Users/create_and_edit', [
+            'roles' => $roles,
+        ]);
+    }
+
+
+    public function store(UserRequest $request)
+    {
+
+        $user = User::create([
+            'username' => $request->username,
+            'email' => $request->email,
+            'phone' => $request->phone,
+            'fullname' => $request->fullname,
+            'password' => Hash::make($request->password),
+            'level' => $request->level,
+            'national_code' => $request->national_code,
+            'profile_url' => $request->image ? $request->image['url'] : '',
+            'created_at' => Carbon::parse($request->datetime),
+            'updated_at' => Carbon::parse($request->datetime),
+        ]);
+
+        if ($request->role){
+            $user->assignRole($request->role);
+        }
+
+        session()->flash('success', 'کاربر جدید با موفقیت ایجاد شد.');
+
+        return response(null , 200);
+    }
+
+
+    public function show(User $user)
+    {
+        //
+    }
+
+
+    public function edit(User $user)
+    {
+        $roles = Role::latest()->get();
+        return Inertia::admin('Users/create_and_edit', [
+            'user' => [
+                'id' => $user->id,
+                'username' => $user->username,
+                'phone' => $user->phone,
+                'fullname' => $user->fullname,
+                'email' => $user->email,
+                'level' => $user->level,
+                'role' => $user->roles()->pluck('id')->toArray(),
+                'profile_url' => $user->profile_url,
+                'created_at' => optional($user->created_at)->format('Y-m-d H:i:s'),
+            ],
+            'roles' => $roles,
+            'is_edit' => true,
+        ]);
+    }
+
+
+    public function update(UserRequest $request, User $user)
+    {
+
+        $user->update([
+            'username' => $request->username,
+            'email' => $request->email,
+            'phone' => $request->phone,
+            'fullname' => $request->fullname,
+            'password' => $request->password ? Hash::make($request->password) : $user->password,
+            'profile_url' => $request->image ? $request->image['url'] : '',
+            'level' => $request->level,
+            'national_code' => $request->national_code,
+            'created_at' => Carbon::parse($request->datetime),
+            'updated_at' => Carbon::parse($request->datetime),
+        ]);
+
+        if ($request->role) {
+            $user->syncRoles($request->role);
+        } else {
+            $user->syncRoles([]);
+        }
+
+        session()->flash('success', 'کاربر با موفقیت بروزرسانی شد.');
+        return response(null , 200);
+    }
+
+
+    public function destroy(User $user)
+    {
+        $user->delete();
+        session()->flash('success', 'کاربر مورد نظر با موفقیت حذف شد.');
+        return response(null , 200);
+    }
+
+    public function getDoctorsOptions(Request $request)
+    {
+        $lists = User::where('level', UserEnum::Doctor->value)
+        ->when(isset($request->search) && !empty($request->search), function ($query) use ($request) {
+            $query->where(function ($q) use ($request) {
+                $q->where('fullname', 'LIKE', "%{$request->search}%")
+                  ->orWhere('username', 'LIKE', "%{$request->search}%")
+                  ->orWhere('email', 'LIKE', "%{$request->search}%");
+            });
+        })
+        ->latest()
+        ->take(20)
+        ->get(['id', 'fullname', 'username', 'email']);
+
+        $options = $lists->map(function ($user) {
+            return [
+                'label' => $user->fullname,
+                'value' => $user->id
+            ];
+        });
+
+        return response()->json([
+            'success' => true,
+            'data' => $options
+        ]);
+    }
+}