add policies

This commit is contained in:
2023-11-28 23:48:21 +05:00
parent 56a7255e4a
commit ede8513ebf
8 changed files with 521 additions and 0 deletions

View File

@@ -45,4 +45,24 @@ class User extends Authenticatable
'email_verified_at' => 'datetime',
'password' => 'hashed',
];
/**
* User is me?
*/
public function isMe(): bool
{
return $this->email === 'nurmuhammet@mail.com';
}
/**
* Is user admin?
*/
public function isAdmin(): bool
{
if ($this->isMe()) {
return true;
}
return $this->hasRole(['king', 'superadmin', 'admin']);
}
}

View File

@@ -0,0 +1,66 @@
<?php
namespace App\Policies\Branch;
use App\Models\Branch\Branch;
use App\Models\User;
use Illuminate\Auth\Access\Response;
class BranchPolicy
{
/**
* Determine whether the user can view any models.
*/
public function viewAny(User $user): bool
{
//
}
/**
* Determine whether the user can view the model.
*/
public function view(User $user, Branch $branch): bool
{
//
}
/**
* Determine whether the user can create models.
*/
public function create(User $user): bool
{
//
}
/**
* Determine whether the user can update the model.
*/
public function update(User $user, Branch $branch): bool
{
//
}
/**
* Determine whether the user can delete the model.
*/
public function delete(User $user, Branch $branch): bool
{
//
}
/**
* Determine whether the user can restore the model.
*/
public function restore(User $user, Branch $branch): bool
{
//
}
/**
* Determine whether the user can permanently delete the model.
*/
public function forceDelete(User $user, Branch $branch): bool
{
//
}
}

View File

@@ -0,0 +1,66 @@
<?php
namespace App\Policies\Order\Loan;
use App\Models\Order\Loan\LoanOrder;
use App\Models\User;
use Illuminate\Auth\Access\Response;
class LoanOrderPolicy
{
/**
* Determine whether the user can view any models.
*/
public function viewAny(User $user): bool
{
//
}
/**
* Determine whether the user can view the model.
*/
public function view(User $user, LoanOrder $loanOrder): bool
{
//
}
/**
* Determine whether the user can create models.
*/
public function create(User $user): bool
{
//
}
/**
* Determine whether the user can update the model.
*/
public function update(User $user, LoanOrder $loanOrder): bool
{
//
}
/**
* Determine whether the user can delete the model.
*/
public function delete(User $user, LoanOrder $loanOrder): bool
{
//
}
/**
* Determine whether the user can restore the model.
*/
public function restore(User $user, LoanOrder $loanOrder): bool
{
//
}
/**
* Determine whether the user can permanently delete the model.
*/
public function forceDelete(User $user, LoanOrder $loanOrder): bool
{
//
}
}

View File

@@ -0,0 +1,66 @@
<?php
namespace App\Policies\Order\Loan;
use App\Models\Order\Loan\LoanType;
use App\Models\User;
use Illuminate\Auth\Access\Response;
class LoanTypePolicy
{
/**
* Determine whether the user can view any models.
*/
public function viewAny(User $user): bool
{
//
}
/**
* Determine whether the user can view the model.
*/
public function view(User $user, LoanType $loanType): bool
{
//
}
/**
* Determine whether the user can create models.
*/
public function create(User $user): bool
{
//
}
/**
* Determine whether the user can update the model.
*/
public function update(User $user, LoanType $loanType): bool
{
//
}
/**
* Determine whether the user can delete the model.
*/
public function delete(User $user, LoanType $loanType): bool
{
//
}
/**
* Determine whether the user can restore the model.
*/
public function restore(User $user, LoanType $loanType): bool
{
//
}
/**
* Determine whether the user can permanently delete the model.
*/
public function forceDelete(User $user, LoanType $loanType): bool
{
//
}
}

View File

@@ -0,0 +1,66 @@
<?php
namespace App\Policies\System\Location;
use App\Models\System\Location\Province;
use App\Models\User;
use Illuminate\Auth\Access\Response;
class ProvincePolicy
{
/**
* Determine whether the user can view any models.
*/
public function viewAny(User $user): bool
{
//
}
/**
* Determine whether the user can view the model.
*/
public function view(User $user, Province $province): bool
{
//
}
/**
* Determine whether the user can create models.
*/
public function create(User $user): bool
{
//
}
/**
* Determine whether the user can update the model.
*/
public function update(User $user, Province $province): bool
{
//
}
/**
* Determine whether the user can delete the model.
*/
public function delete(User $user, Province $province): bool
{
//
}
/**
* Determine whether the user can restore the model.
*/
public function restore(User $user, Province $province): bool
{
//
}
/**
* Determine whether the user can permanently delete the model.
*/
public function forceDelete(User $user, Province $province): bool
{
//
}
}

View File

@@ -0,0 +1,66 @@
<?php
namespace App\Policies\System\Roles;
use App\Models\System\Roles\Permission;
use App\Models\User;
use Illuminate\Auth\Access\Response;
class PermissionPolicy
{
/**
* Determine whether the user can view any models.
*/
public function viewAny(User $user): bool
{
//
}
/**
* Determine whether the user can view the model.
*/
public function view(User $user, Permission $permission): bool
{
//
}
/**
* Determine whether the user can create models.
*/
public function create(User $user): bool
{
//
}
/**
* Determine whether the user can update the model.
*/
public function update(User $user, Permission $permission): bool
{
//
}
/**
* Determine whether the user can delete the model.
*/
public function delete(User $user, Permission $permission): bool
{
//
}
/**
* Determine whether the user can restore the model.
*/
public function restore(User $user, Permission $permission): bool
{
//
}
/**
* Determine whether the user can permanently delete the model.
*/
public function forceDelete(User $user, Permission $permission): bool
{
//
}
}

View File

@@ -0,0 +1,66 @@
<?php
namespace App\Policies\System\Roles;
use App\Models\System\Roles\Role;
use App\Models\User;
use Illuminate\Auth\Access\Response;
class RolePolicy
{
/**
* Determine whether the user can view any models.
*/
public function viewAny(User $user): bool
{
//
}
/**
* Determine whether the user can view the model.
*/
public function view(User $user, Role $role): bool
{
//
}
/**
* Determine whether the user can create models.
*/
public function create(User $user): bool
{
//
}
/**
* Determine whether the user can update the model.
*/
public function update(User $user, Role $role): bool
{
//
}
/**
* Determine whether the user can delete the model.
*/
public function delete(User $user, Role $role): bool
{
//
}
/**
* Determine whether the user can restore the model.
*/
public function restore(User $user, Role $role): bool
{
//
}
/**
* Determine whether the user can permanently delete the model.
*/
public function forceDelete(User $user, Role $role): bool
{
//
}
}

105
app/Policies/UserPolicy.php Normal file
View File

@@ -0,0 +1,105 @@
<?php
namespace App\Policies;
use App\Models\User;
use Illuminate\Auth\Access\Response;
class UserPolicy
{
/**
* Determine whether the user can view any models.
*/
public function viewAny(User $user): bool
{
if ($user->isAdmin()) {
return true;
}
return false;
}
/**
* Determine whether the user can view the model.
*/
public function view(User $user, User $model): bool
{
if ($model->email === 'nurmuhammet@mail.com') {
return $user->isMe();
}
if ($user->isAdmin()) {
return true;
}
return false;
}
/**
* Determine whether the user can create models.
*/
public function create(User $user): bool
{
if ($user->isAdmin()) {
return true;
}
return false;
}
/**
* Determine whether the user can update the model.
*/
public function update(User $user, User $model): bool
{
if ($model->email === 'nurmuhammet@mail.com') {
return $user->isMe();
}
if ($user->isAdmin()) {
return true;
}
return false;
}
/**
* Determine whether the user can delete the model.
*/
public function delete(User $user, User $model): bool
{
if ($model->email === 'nurmuhammet@mail.com') {
return false;
}
if ($user->isAdmin()) {
return true;
}
return false;
}
/**
* Determine whether the user can restore the model.
*/
public function restore(User $user, User $model): bool
{
if ($user->isAdmin()) {
return true;
}
return false;
}
/**
* Determine whether the user can permanently delete the model.
*/
public function forceDelete(User $user, User $model): bool
{
if ($user->isAdmin()) {
return true;
}
return false;
}
}