feat: Plan 2 — Form Edit Rumah Ibadah & Keluarga Miskin + Ownership

- Add user_id FK (nullable) to rumah_ibadah for ownership tracking
- IbadahController: set user_id on store; enforce ownership on update/destroy
- Add edit modals to map and data views (ibadah + miskin)
- Popup and table row Edit buttons with per-record ownership check
- 7 new tests covering ownership and full-field updates
- Fix ExampleTest for auth-protected routes
- Fix UserFactory missing email_verified_at column
- Mark Plan 2 complete in missing_features.md; update README

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app/Http/Controllers/IbadahController.php

@@ -16,12 +16,18 @@ class IbadahController extends Controller
     {
         $validated = $request->validate([
             'nama' => 'required|string',
-            'alamat' => 'required|string',
+            'jenis' => 'nullable|string',
+            'alamat' => 'nullable|string',
             'latitude' => 'required|numeric',
             'longitude' => 'required|numeric',
             'radius' => 'nullable|integer',
+            'jumlah_jemaah' => 'nullable|integer',
+            'pengurus' => 'nullable|string',
+            'telepon' => 'nullable|string',
+            'keterangan' => 'nullable|string',
         ]);
 
+        $validated['user_id'] = auth()->id();
         $ibadah = RumahIbadah::create($validated);
         return response()->json(['success' => true, 'data' => $ibadah]);
     }
@@ -29,12 +35,22 @@ class IbadahController extends Controller
     public function update(Request $request, $id)
     {
         $ibadah = RumahIbadah::findOrFail($id);
+
+        if (!auth()->user()->hasRole('administrator') && $ibadah->user_id !== auth()->id()) {
+            return response()->json(['message' => 'Tidak diizinkan mengubah data ini.'], 403);
+        }
+
         $validated = $request->validate([
             'nama' => 'required|string',
-            'alamat' => 'required|string',
+            'jenis' => 'nullable|string',
+            'alamat' => 'nullable|string',
             'latitude' => 'required|numeric',
             'longitude' => 'required|numeric',
             'radius' => 'required|integer',
+            'jumlah_jemaah' => 'nullable|integer',
+            'pengurus' => 'nullable|string',
+            'telepon' => 'nullable|string',
+            'keterangan' => 'nullable|string',
         ]);
 
         $ibadah->update($validated);
@@ -44,6 +60,11 @@ class IbadahController extends Controller
     public function destroy($id)
     {
         $ibadah = RumahIbadah::findOrFail($id);
+
+        if (!auth()->user()->hasRole('administrator') && $ibadah->user_id !== auth()->id()) {
+            return response()->json(['message' => 'Tidak diizinkan menghapus data ini.'], 403);
+        }
+
         $ibadah->delete();
         return response()->json(['success' => true]);
     }

app/Models/RumahIbadah.php

@@ -11,5 +11,10 @@ class RumahIbadah extends Model
     use HasFactory;
 
     protected $table = 'rumah_ibadah';
-    protected $fillable = ['nama', 'alamat', 'latitude', 'longitude', 'radius'];
+    protected $fillable = ['user_id', 'nama', 'jenis', 'alamat', 'latitude', 'longitude', 'radius', 'jumlah_jemaah', 'pengurus', 'telepon', 'keterangan'];
+
+    public function user()
+    {
+        return $this->belongsTo(\App\Models\User::class);
+    }
 }

app/Models/User.php

@@ -2,13 +2,14 @@
 
 namespace App\Models;
 
+use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
 use Spatie\Permission\Traits\HasRoles;
 
 class User extends Authenticatable
 {
-    use HasRoles, Notifiable;
+    use HasFactory, HasRoles, Notifiable;
 
     protected $fillable = ['name', 'email', 'password'];