disable access to spare parts for brigadier role

routes/web.php

@@ -258,7 +258,7 @@ Route::middleware('auth:web')->group(function () {
     Route::get('areas/{district_id?}', [AreaController::class, 'ajaxGetAreasByDistrict'])->name('area.ajax-get-areas-by-district');
 
     // Каталог запчастей
-    Route::prefix('spare-parts')->name('spare_parts.')->group(function () {
+    Route::prefix('spare-parts')->name('spare_parts.')->middleware('role:admin,manager')->group(function () {
         Route::get('/', [SparePartController::class, 'index'])->name('index');
         Route::get('/help', [SparePartController::class, 'help'])->name('help');
         Route::get('/search', [SparePartController::class, 'search'])->name('search');
@@ -273,15 +273,15 @@ Route::middleware('auth:web')->group(function () {
     });
 
     // Заказы деталей
-    Route::prefix('spare-part-orders')->name('spare_part_orders.')->group(function () {
+    Route::prefix('spare-part-orders')->name('spare_part_orders.')->middleware('role:admin,manager')->group(function () {
         Route::get('/', [SparePartOrderController::class, 'index'])->name('index');
-        Route::get('/create', [SparePartOrderController::class, 'create'])->name('create')->middleware('role:admin,manager');
+        Route::get('/create', [SparePartOrderController::class, 'create'])->name('create');
         Route::get('/{sparePartOrder}', [SparePartOrderController::class, 'show'])->name('show');
-        Route::post('/', [SparePartOrderController::class, 'store'])->name('store')->middleware('role:admin,manager');
-        Route::put('/{sparePartOrder}', [SparePartOrderController::class, 'update'])->name('update')->middleware('role:admin,manager');
+        Route::post('/', [SparePartOrderController::class, 'store'])->name('store');
+        Route::put('/{sparePartOrder}', [SparePartOrderController::class, 'update'])->name('update');
         Route::delete('/{sparePartOrder}', [SparePartOrderController::class, 'destroy'])->name('destroy')->middleware('role:admin');
-        Route::post('/{sparePartOrder}/ship', [SparePartOrderController::class, 'ship'])->name('ship')->middleware('role:admin,manager');
-        Route::post('/{sparePartOrder}/set-in-stock', [SparePartOrderController::class, 'setInStock'])->name('set_in_stock')->middleware('role:admin,manager');
+        Route::post('/{sparePartOrder}/ship', [SparePartOrderController::class, 'ship'])->name('ship');
+        Route::post('/{sparePartOrder}/set-in-stock', [SparePartOrderController::class, 'setInStock'])->name('set_in_stock');
         Route::post('/{sparePartOrder}/correct', [SparePartOrderController::class, 'correct'])->name('correct')->middleware('role:admin');
     });
 
@@ -296,7 +296,7 @@ Route::middleware('auth:web')->group(function () {
     });
 
     // Контроль наличия
-    Route::get('/spare-part-inventory', [SparePartInventoryController::class, 'index'])->name('spare_part_inventory.index');
+    Route::get('/spare-part-inventory', [SparePartInventoryController::class, 'index'])->name('spare_part_inventory.index')->middleware('role:admin,manager');
 
     // API для получения расшифровки кодов (без ограничения по роли, должны быть ПЕРЕД группой с prefix)
     Route::get('/pricing-codes/get-description', [PricingCodeController::class, 'getDescription'])->name('pricing_codes.get_description');