115 lines
3.3 KiB
PHP
115 lines
3.3 KiB
PHP
<?php
|
|
|
|
namespace App\Models;
|
|
|
|
use App\Enums\Users\RoleEnum;
|
|
use App\Traits\Models\ActivityLog;
|
|
use Illuminate\Auth\Access\AuthorizationException;
|
|
use Illuminate\Database\Eloquent\Factories\HasFactory;
|
|
use Illuminate\Foundation\Auth\User as Authenticatable;
|
|
use Illuminate\Notifications\Notifiable;
|
|
|
|
/**
|
|
* @property string $first_name Firstname.
|
|
* @property string $last_name Lastname.
|
|
* @property string $email Email.
|
|
* @property string $remember_token Remember_token.
|
|
* @property \App\Enums\Users\RoleEnum $role Role.
|
|
* @property \Illuminate\Support\Carbon $last_connection Last_connection.
|
|
* @property boolean $published Published status.
|
|
* @property \Illuminate\Support\Carbon $published_at Publication status update date.
|
|
* @property-read \Illuminate\Support\Carbon $created_at Created date.
|
|
* @property-read \Illuminate\Support\Carbon $updated_at Updated date.
|
|
*
|
|
* @property-read \App\Models\ActivityLog $activityLogs Activities logs HasMany relationship.
|
|
*/
|
|
class User extends Authenticatable
|
|
{
|
|
use ActivityLog;
|
|
use HasFactory;
|
|
use Notifiable;
|
|
|
|
/**
|
|
* The attributes that are mass assignable.
|
|
*
|
|
* @var array<int, string>
|
|
*/
|
|
protected $fillable = [
|
|
'first_name',
|
|
'last_name',
|
|
'email',
|
|
'role',
|
|
'published',
|
|
'published_at',
|
|
];
|
|
|
|
/**
|
|
* The attributes that should be hidden for serialization.
|
|
*
|
|
* @var array<int, string>
|
|
*/
|
|
protected $hidden = [
|
|
'remember_token',
|
|
];
|
|
|
|
/**
|
|
* The attributes that should be cast.
|
|
*
|
|
* @var array<string, string>
|
|
*/
|
|
protected $casts = [
|
|
'role' => RoleEnum::class,
|
|
'last_connection' => 'date',
|
|
'published' => 'boolean',
|
|
'published_at' => 'datetime',
|
|
];
|
|
|
|
/**
|
|
* Perform any actions required after the model boots.
|
|
*
|
|
* @return void
|
|
*/
|
|
protected static function booted(): void
|
|
{
|
|
static::creating(function (self $model) {
|
|
self::checkElevationPrivileges($model);
|
|
});
|
|
static::updating(function (self $model) {
|
|
self::updatePublishedStatus($model);
|
|
self::checkElevationPrivileges($model);
|
|
});
|
|
}
|
|
|
|
// * METHODS
|
|
|
|
/**
|
|
* Check if the authenticable user can update the published status.
|
|
*
|
|
* @param self $user
|
|
* @return void
|
|
*/
|
|
private static function updatePublishedStatus(self $user): void
|
|
{
|
|
if (optional(auth('backend')->user())->getKey() === $user->getKey()) {
|
|
\validator(
|
|
['published' => $user->published],
|
|
['published' => 'required|boolean|accepted'],
|
|
['published.accepted' => trans('Vous ne pouvez pas désactiver votre propre compte')],
|
|
)->validate();
|
|
}
|
|
}
|
|
|
|
/**
|
|
* Prevent user elevation privileges.
|
|
*
|
|
* @param self $user
|
|
* @return void
|
|
*/
|
|
private static function checkElevationPrivileges(self $user): void
|
|
{
|
|
throw_if(
|
|
auth('backend')->user() and auth('backend')->user()->role->value() > $user->role->value(),
|
|
AuthorizationException::class
|
|
);
|
|
}
|
|
}
|