ed81e31e09
- add users policy - correct readonly handle on crud - crud readonly callback support - crud readonly for belongsTo and belongsToMany
44 lines
1.2 KiB
PHP
44 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Enums\Role;
|
|
use App\Models\User;
|
|
use Illuminate\Database\Eloquent\Builder;
|
|
use Illuminate\Database\Eloquent\Model;
|
|
|
|
class UsersController extends CrudController
|
|
{
|
|
|
|
/** @var User */
|
|
protected static $modelClass = User::class;
|
|
|
|
// Eloquent callbacks
|
|
public function indexQuery(Builder $query): Builder
|
|
{
|
|
/** @var \App\Models\User */
|
|
$user = auth()->user();
|
|
if (!$user->role->equals(Role::admin())) {
|
|
return $query->whereId($user->id);
|
|
}
|
|
return $query;
|
|
}
|
|
|
|
public function storeModel(Model &$model)
|
|
{
|
|
/** @var \App\Models\User */
|
|
$user = auth()->user();
|
|
if (!$user->role->equals(Role::admin()) and $model->id !== $user->id) {
|
|
abort(403, 'Vous n\'êtes pas autorisé à modifier un autre utilisateur que vous même');
|
|
}
|
|
}
|
|
|
|
public function updateModel(Model &$model)
|
|
{
|
|
/** @var \App\Models\User */
|
|
$user = auth()->user();
|
|
if (!$user->role->equals(Role::admin()) and $model->id !== $user->id) {
|
|
abort(403, 'Vous n\'êtes pas autorisé à modifier un autre utilisateur que vous même');
|
|
}
|
|
}
|
|
}
|