add role permission logic

2026-03-10 17:11:48 -04:00
parent abebe0d9c0
commit c235fd2170
40 changed files with 1896 additions and 838 deletions
@@ -0,0 +1,58 @@
+<?php
+
+namespace App\Services\Roles;
+
+use App\Models\Role;
+use App\Models\Staff;
+use App\Models\User;
+use App\Models\UserRole;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Log;
+
+class RoleAssignmentService
+{
+    public function __construct(private RoleStaffService $staffService)
+    {
+    }
+
+    /** @param int[] $roleIds */
+    public function assignRoles(int $userId, array $roleIds, ?int $adminId = null): array
+    {
+        $roleIds = array_values(array_unique(array_filter(array_map('intval', $roleIds), fn ($id) => $id > 0)));
+
+        $user = User::query()->find($userId);
+        if (!$user) {
+            return ['ok' => false, 'message' => 'User not found.'];
+        }
+
+        try {
+            DB::transaction(function () use ($userId, $roleIds, $adminId) {
+                UserRole::query()->where('user_id', $userId)->delete();
+
+                foreach ($roleIds as $roleId) {
+                    UserRole::query()->create([
+                        'user_id' => $userId,
+                        'role_id' => $roleId,
+                        'updated_by' => $adminId,
+                    ]);
+                }
+            });
+        } catch (\Throwable $e) {
+            Log::error('Role assignment failed: ' . $e->getMessage());
+            throw $e;
+        }
+
+        $roleNames = Role::query()
+            ->whereIn('id', $roleIds)
+            ->pluck('name')
+            ->map(fn ($n) => strtolower((string) $n))
+            ->all();
+
+        $this->staffService->syncStaffRecord($user, $roleNames);
+
+        return [
+            'ok' => true,
+            'role_names' => $roleNames,
+        ];
+    }
+}