online.tbbank.gov.tm-laravel-nova/app/Modules/SberPaymentOrder/Nova/Resources/Concerns/NovaSberPaymentOrderAuth.php

<?php

namespace App\Modules\SberPaymentOrder\Nova\Resources\Concerns;

use App\Modules\SberPaymentOrder\Models\SberPaymentOrder;
use Illuminate\Auth\Access\AuthorizationException;
use Illuminate\Http\Request;

trait NovaSberPaymentOrderAuth
{
    /**
     * Determine if the resource should be available for the given request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return void
     *
     * @throws \Illuminate\Auth\Access\AuthorizationException
     */
    public function authorizeToViewAny(Request $request)
    {
        $user = auth()->user();

        if ($user->isSystemUser()) {
            return;
        }

        // if ($user->isMe() || $user->isSuperAdmin()) {
        //     return;
        // }

        /** @var SberPaymentOrder $resource */
        $resource = $this->resource;
        if ($resource->user_id == auth()->id()) {
            return;
        }

        throw new AuthorizationException;
    }

    /**
     * Determine if the resource should be available for the given request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @return bool
     */
    public static function authorizedToViewAny(Request $request)
    {
        $user = auth()->user();

        if ($user->isSystemUser()) {
            return true;
        }

        if ($user->isMe() || $user->isSuperAdmin()) {
            return true;
        }

        return false;
    }

    /** View */
    public function authorizeToView(Request $request)
    {
        $user = auth()->user();

        if ($user->isSystemUser()) {
            return;
        }

        if ($user->isMe() || $user->isSuperAdmin()) {
            return;
        }

        /** @var SberPaymentOrder $resource */
        $resource = $this->resource;
        if ($resource->user_id == auth()->id()) {
            return;
        }

        throw new AuthorizationException;
    }

    /** Edit button */
    public function authorizedToUpdate(Request $request): bool
    {
        $user = auth()->user();

        if ($user->isSystemUser()) {
            return true;
        }

        if ($user->isMe() || $user->isSuperAdmin()) {
            return true;
        }

        return false;
    }

    /** Update */
    public function authorizeToUpdate(Request $request): void
    {
        $user = auth()->user();

        if ($user->isMe()) {
            return;
        }

        if ($user->isSystemUser()) {
            return;
        }

        /** @var SberPaymentOrder $resource */
        $resource = $this->resource;
        if ($resource->user_id == auth()->id()) {
            return;
        }

        throw new AuthorizationException;
    }

    /** Delete button */
    public function authorizedToDelete(Request $request): bool
    {
        $user = auth()->user();

        if ($user->isSystemUser()) {
            return true;
        }

        if ($user->isMe() || $user->isSuperAdmin()) {
            return true;
        }

        return false;
    }

    /** Delete */
    public function authorizeToDelete(Request $request)
    {
        $user = auth()->user();

        if ($user->isSystemUser()) {
            return;
        }

        if ($user->isMe() || $user->isSuperAdmin()) {
            return;
        }

        throw new AuthorizationException;
    }

    /** Force delete */
    public function authorizedToForceDelete(Request $request)
    {
        return auth()->user()->isMe();
    }
}