[FEAT] 優化帳號管理授權顯示邏輯與 UI 樣式一致性

app/Http/Controllers/Admin/BasicSettings/MachineSettingController.php

@@ -45,7 +45,7 @@ class MachineSettingController extends AdminController
         // 3. 基礎下拉資料 (用於新增/編輯機台的彈窗)
         $models = MachineModel::select('id', 'name')->get();
         $paymentConfigs = PaymentConfig::select('id', 'name')->get();
-        $companies = \App\Models\System\Company::select('id', 'name')->get();
+        $companies = \App\Models\System\Company::select('id', 'name', 'code')->get();
 
         return view('admin.basic-settings.machines.index', compact(
             'machines', 
@@ -101,7 +101,7 @@ class MachineSettingController extends AdminController
     {
         $models = MachineModel::select('id', 'name')->get();
         $paymentConfigs = PaymentConfig::select('id', 'name')->get();
-        $companies = \App\Models\System\Company::select('id', 'name')->get();
+        $companies = \App\Models\System\Company::select('id', 'name', 'code')->get();
 
         return view('admin.basic-settings.machines.edit', compact('machine', 'models', 'paymentConfigs', 'companies'));
     }
@@ -137,6 +137,13 @@ class MachineSettingController extends AdminController
                 'payment_config_id' => 'nullable|exists:payment_configs,id',
                 'location' => 'nullable|string|max:255',
             ]);
+
+            // 僅限系統管理員可修改公司
+            if (auth()->user()->isSystemAdmin()) {
+                $companyRule = ['company_id' => 'nullable|exists:companies,id'];
+                $companyData = $request->validate($companyRule);
+                $validated = array_merge($validated, $companyData);
+            }
             
             Log::info('Machine Update Validated Data', ['data' => $validated]);
         } catch (\Illuminate\Validation\ValidationException $e) {

app/Http/Controllers/Admin/BasicSettings/PaymentConfigController.php

@@ -38,7 +38,7 @@ class PaymentConfigController extends AdminController
      */
     public function create(): View
     {
-        $companies = \App\Models\System\Company::select('id', 'name')->get();
+        $companies = \App\Models\System\Company::select('id', 'name', 'code')->get();
         return view('admin.basic-settings.payment-configs.create', compact('companies'));
     }
 

app/Http/Controllers/Admin/MachineController.php

@@ -67,12 +67,68 @@ class MachineController extends AdminController
         return view('admin.machines.logs', compact('logs', 'machines'));
     }
 
+
     /**
-     * 機台權限設定 (開發中)
+     * AJAX: 取得特定帳號的機台分配狀態
      */
-    public function permissions(Request $request): View
+    public function getAccountMachines(\App\Models\System\User $user)
     {
-        return view('admin.machines.index', ['machines' => Machine::paginate(1)]); // Placeholder
+        $currentUser = auth()->user();
+
+        // 安全檢查：只能操作自己公司的帳號（除非是系統管理員）
+        if (!$currentUser->isSystemAdmin() && $user->company_id !== $currentUser->company_id) {
+            return response()->json(['error' => 'Unauthorized'], 403);
+        }
+
+        // 取得該公司所有機台 (限定 company_id 以實作資料隔離)
+        $machines = Machine::where('company_id', $user->company_id)
+            ->get(['id', 'name', 'serial_no']);
+            
+        $assignedIds = $user->machines()->pluck('machines.id')->toArray();
+
+        return response()->json([
+            'user' => $user,
+            'machines' => $machines,
+            'assigned_ids' => $assignedIds
+        ]);
+    }
+
+    /**
+     * AJAX: 儲存特定帳號的機台分配
+     */
+    public function syncAccountMachines(Request $request, \App\Models\System\User $user)
+    {
+        $currentUser = auth()->user();
+
+        // 安全檢查
+        if (!$currentUser->isSystemAdmin() && $user->company_id !== $currentUser->company_id) {
+            return response()->json(['error' => 'Unauthorized'], 403);
+        }
+
+        $request->validate([
+            'machine_ids' => 'nullable|array',
+            'machine_ids.*' => 'exists:machines,id'
+        ]);
+
+        // 加固驗證：確保所有機台 ID 都屬於該使用者的公司
+        if ($request->has('machine_ids')) {
+            $machineIds = array_unique($request->machine_ids);
+            $validCount = Machine::where('company_id', $user->company_id)
+                ->whereIn('id', $machineIds)
+                ->count();
+            
+            if ($validCount !== count($machineIds)) {
+                return response()->json(['error' => 'Invalid machine IDs provided.'], 422);
+            }
+        }
+
+        $user->machines()->sync($request->machine_ids ?? []);
+
+        return response()->json([
+            'success' => true, 
+            'message' => __('Permissions updated successfully.'),
+            'assigned_machines' => $user->machines()->select('machines.id', 'machines.name', 'machines.serial_no')->get()
+        ]);
     }
 
     /**

app/Http/Controllers/Admin/PermissionController.php

@@ -248,7 +248,7 @@ class PermissionController extends Controller
     // 帳號管理
     public function accounts(Request $request)
     {
-        $query = \App\Models\System\User::query()->with(['company', 'roles']);
+        $query = \App\Models\System\User::query()->with(['company', 'roles', 'machines']);
 
         // 租戶隔離：如果不是系統管理員，則只看自己公司的成員
         if (!auth()->user()->isSystemAdmin()) {