46 lines
1.3 KiB
PHP
46 lines
1.3 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Enums\Role;
|
|
use App\Models\User;
|
|
use Illuminate\Database\Eloquent\Builder;
|
|
use Illuminate\Database\Eloquent\Model;
|
|
use Kwaadpepper\CrudPolicies\Traits\CrudController;
|
|
|
|
class UsersController extends Controller
|
|
{
|
|
use CrudController;
|
|
|
|
/** @var User */
|
|
public static $modelClass = User::class;
|
|
|
|
// Eloquent callbacks
|
|
public function indexQuery(Builder $query): Builder
|
|
{
|
|
/** @var \App\Models\User */
|
|
$user = auth()->user();
|
|
if (!$user->role->equals(Role::admin())) {
|
|
return $query->whereId($user->id);
|
|
}
|
|
return $query;
|
|
}
|
|
|
|
public function storeModel(Model &$model)
|
|
{
|
|
/** @var \App\Models\User */
|
|
$user = auth()->user();
|
|
if (!$user->role->equals(Role::admin()) and $model->id !== $user->id) {
|
|
abort(403, 'Vous n\'êtes pas autorisé à modifier un autre utilisateur que vous même');
|
|
}
|
|
}
|
|
|
|
public function updateModel(Model &$model)
|
|
{
|
|
/** @var \App\Models\User */
|
|
$user = auth()->user();
|
|
if (!$user->role->equals(Role::admin()) and $model->id !== $user->id) {
|
|
abort(403, 'Vous n\'êtes pas autorisé à modifier un autre utilisateur que vous même');
|
|
}
|
|
}
|
|
}
|