2e0bc37d91
API CI/CD / Validate (composer + pint) (push) Successful in 2m6s
API CI/CD / Test (PHPUnit) (push) Failing after 2m16s
API CI/CD / Build frontend assets (push) Successful in 2m15s
API CI/CD / Security audit (push) Successful in 32s
API CI/CD / Deploy to shared hosting (PHP) (push) Has been skipped
51 lines
1.2 KiB
PHP
51 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace App\Policies;
|
|
|
|
use App\Models\Preferences;
|
|
use App\Models\User;
|
|
|
|
class PreferencesPolicy
|
|
{
|
|
public function viewAny(User $user): bool
|
|
{
|
|
return $this->isAdmin($user);
|
|
}
|
|
|
|
public function view(User $user, Preferences $preferences): bool
|
|
{
|
|
return $preferences->user_id === $user->id || $this->isAdmin($user);
|
|
}
|
|
|
|
public function update(User $user, Preferences $preferences): bool
|
|
{
|
|
return $preferences->user_id === $user->id || $this->isAdmin($user);
|
|
}
|
|
|
|
public function delete(User $user, Preferences $preferences): bool
|
|
{
|
|
return $preferences->user_id === $user->id || $this->isAdmin($user);
|
|
}
|
|
|
|
public function create(User $user): bool
|
|
{
|
|
return $user !== null;
|
|
}
|
|
|
|
private function isAdmin(User $user): bool
|
|
{
|
|
$roles = $user->roles()
|
|
->pluck('roles.name')
|
|
->map(fn ($name) => strtolower((string) $name))
|
|
->toArray();
|
|
|
|
foreach (['administrator', 'admin', 'principal', 'vice_principal', 'vice-principal'] as $role) {
|
|
if (in_array($role, $roles, true)) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
}
|