How to filter dashboard data by logged-in user (non-admin users should see only their own data)?

Segaf

There’s a section on the dashboard that displays Top Customers by Revenue.

By default, this section shows leads and revenue from all users, but I want to restrict it so that:

Non-admin users only see leads assigned to themselves (leads.user_id = auth()->id()).
Admin users (role_id = 1) can still see all leads without any restriction.

Scenario:

The main models involved are Person and Lead.
Each record in the leads table has a user_id field that identifies the owner of that lead.

What I’ve tried so far:

I added logic so that only specific users can view their own data.

public function getTopCustomersByRevenue($limit = null)
{
    $tablePrefix = DB::getTablePrefix();
    $user = auth()->user();

    $query = $this->personRepository
        ->resetModel()
        ->leftJoin('leads', 'persons.id', '=', 'leads.person_id')
        ->select('*', 'persons.id as id')
        ->addSelect(DB::raw('SUM('.$tablePrefix.'leads.lead_value) as revenue'))
        ->whereBetween('leads.closed_at', [$this->startDate, $this->endDate])
        ->having(DB::raw('SUM('.$tablePrefix.'leads.lead_value)'), '>', 0)
        ->groupBy('person_id')
        ->orderBy('revenue', 'DESC');

    if ($user->role_id != 1) {
        $query->where('leads.user_id', $user->id);
    }

However, this does not seem to work correctly, even non-admin users still see leads belonging to other users.

rishabh_webkul19

Hello @Segaf

You can verify this by adding the following code snippet inside the dashboard.php file:

$items = $this->personRepository
->resetModel()
->leftJoin('leads', 'persons.id', '=', 'leads.person_id')
->select('*', 'persons.id as id')
->addSelect(DB::raw('SUM('.$tablePrefix.'leads.lead_value) as revenue'))
->whereBetween('leads.closed_at', [$this->startDate, $this->endDate])
->having(DB::raw('SUM('.$tablePrefix.'leads.lead_value)'), '>', 0)
->groupBy('person_id')
->orderBy('revenue', 'DESC')
->limit($limit);

if ($userIds = bouncer()->getAuthorizedUserIds()) {
$items->whereIn('leads.user_id', $userIds);
}

$items = $items->get();

This will help you to resolve your query. In case of any issue do let us know.

NOTE : There is no Role based data available in krayin crm also we have group visibility in Krayin

Warm Regards