API Feature (#334)

This commit is contained in:
Saeed Vaziry
2024-11-01 16:49:57 +01:00
committed by GitHub
parent da7b24640e
commit 417bf73e44
143 changed files with 36520 additions and 586 deletions

View File

@ -0,0 +1,42 @@
<?php
namespace App\Policies;
use App\Models\PersonalAccessToken;
use App\Models\User;
use Illuminate\Auth\Access\HandlesAuthorization;
class PersonalAccessTokenPolicy
{
use HandlesAuthorization;
public function viewAny(User $user): bool
{
return $user->isAdmin();
}
public function view(User $user, PersonalAccessToken $personalAccessToken): bool
{
return $user->isAdmin();
}
public function create(User $user): bool
{
return $user->isAdmin();
}
public function update(User $user, PersonalAccessToken $personalAccessToken): bool
{
return $user->isAdmin();
}
public function delete(User $user, PersonalAccessToken $personalAccessToken): bool
{
return $user->isAdmin();
}
public function deleteMany(User $user): bool
{
return $user->isAdmin();
}
}

View File

@ -2,14 +2,15 @@
namespace App\Policies;
use App\Models\Project;
use App\Models\Server;
use App\Models\User;
class ServerPolicy
{
public function viewAny(User $user): bool
public function viewAny(User $user, Project $project): bool
{
return $user->isAdmin() || $user->currentProject?->users->contains($user);
return $user->isAdmin() || $project->users->contains($user);
}
public function view(User $user, Server $server): bool
@ -17,9 +18,9 @@ public function view(User $user, Server $server): bool
return $user->isAdmin() || $server->project->users->contains($user);
}
public function create(User $user): bool
public function create(User $user, Project $project): bool
{
return $user->isAdmin() || $user->currentProject?->users->contains($user);
return $user->isAdmin() || $project->users->contains($user);
}
public function update(User $user, Server $server): bool

View File

@ -12,26 +12,29 @@ class ServerProviderPolicy
public function viewAny(User $user): bool
{
return $user->isAdmin();
return true;
}
public function view(User $user, ServerProvider $serverProvider): bool
{
return $user->isAdmin();
return $user->isAdmin() ||
$user->id === $serverProvider->user_id ||
$serverProvider->project_id === null ||
$serverProvider->project?->users()->where('user_id', $user->id)->exists();
}
public function create(User $user): bool
{
return $user->isAdmin();
return true;
}
public function update(User $user, ServerProvider $serverProvider): bool
{
return $user->isAdmin();
return $user->isAdmin() || $user->id === $serverProvider->user_id;
}
public function delete(User $user, ServerProvider $serverProvider): bool
{
return $user->isAdmin();
return $user->isAdmin() || $user->id === $serverProvider->user_id;
}
}