43 lines
1.3 KiB
PHP
43 lines
1.3 KiB
PHP
<?php
|
|
|
|
namespace App\Policies;
|
|
|
|
use App\Models\User;
|
|
use App\Policies\Rules\LogStaticRules;
|
|
use App\Policies\Rules\UserRoleRules as URR;
|
|
use Illuminate\Auth\Access\HandlesAuthorization;
|
|
use Illuminate\Database\Eloquent\Model;
|
|
use Kwaadpepper\CrudPolicies\Policies\RootPolicy;
|
|
use Kwaadpepper\CrudPolicies\Policies\Rules\StaticRules;
|
|
|
|
class LogPolicy extends RootPolicy
|
|
{
|
|
use HandlesAuthorization;
|
|
|
|
/**
|
|
* Init policies on call
|
|
*
|
|
* @param User $user
|
|
* @param Model $model
|
|
* @return void
|
|
*/
|
|
// phpcs:ignore Generic.CodeAnalysis.UnusedFunctionParameter.FoundInExtendedClassAfterLastUsed
|
|
public function setPolicies(User $user, Model $model = null)
|
|
{
|
|
/**
|
|
* This first rule to return true in a policy action authorises the action
|
|
*/
|
|
$this->policies = [
|
|
'log' => [
|
|
'viewAny' => URR::make('userIsAdmin', $user),
|
|
'view' => URR::make('denyEveryOne'),
|
|
'update' => StaticRules::and([
|
|
URR::make('userIsDev', $user),
|
|
LogStaticRules::make('logIsOwnedByUser', $user, $model)
|
|
]),
|
|
'create' => URR::make('userIsAdmin', $user),
|
|
'delete' => URR::make('denyEveryOne')
|
|
]
|
|
];
|
|
}
|
|
}
|