root
55 lines
1.5 KiB
PHP
55 lines
1.5 KiB
PHP
<?php
|
|
|
|
namespace App\Services\Auth;
|
|
|
|
use Illuminate\Support\Facades\DB;
|
|
|
|
class UserRoleService
|
|
{
|
|
public function getRoleIds(int $userId): array
|
|
{
|
|
return DB::table('user_roles')
|
|
->where('user_id', $userId)
|
|
->whereNull('deleted_at')
|
|
->pluck('role_id')
|
|
->map(fn ($id) => (int) $id)
|
|
->all();
|
|
}
|
|
|
|
public function hasPermissionForCrud(array $roleIds, string $permissionName, string $crudAction = 'read'): bool
|
|
{
|
|
if (empty($roleIds)) {
|
|
return false;
|
|
}
|
|
|
|
$rows = DB::table('role_permissions as rp')
|
|
->join('permissions as p', 'p.id', '=', 'rp.permission_id')
|
|
->whereIn('rp.role_id', $roleIds)
|
|
->where('p.name', $permissionName)
|
|
->select('rp.can_create', 'rp.can_read', 'rp.can_update', 'rp.can_delete', 'rp.can_manage')
|
|
->get();
|
|
|
|
foreach ($rows as $row) {
|
|
$manage = (bool) ($row->can_manage ?? false);
|
|
if ($manage) {
|
|
return true;
|
|
}
|
|
|
|
if ($crudAction === 'create' && ! empty($row->can_create)) {
|
|
return true;
|
|
}
|
|
if ($crudAction === 'read' && ! empty($row->can_read)) {
|
|
return true;
|
|
}
|
|
if ($crudAction === 'update' && ! empty($row->can_update)) {
|
|
return true;
|
|
}
|
|
if ($crudAction === 'delete' && ! empty($row->can_delete)) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
}
|