mirror of
https://github.com/vitodeploy/vito.git
synced 2025-07-05 07:52:34 +00:00
API Feature (#334)
This commit is contained in:
42
app/Policies/PersonalAccessTokenPolicy.php
Normal file
42
app/Policies/PersonalAccessTokenPolicy.php
Normal file
@ -0,0 +1,42 @@
|
||||
<?php
|
||||
|
||||
namespace App\Policies;
|
||||
|
||||
use App\Models\PersonalAccessToken;
|
||||
use App\Models\User;
|
||||
use Illuminate\Auth\Access\HandlesAuthorization;
|
||||
|
||||
class PersonalAccessTokenPolicy
|
||||
{
|
||||
use HandlesAuthorization;
|
||||
|
||||
public function viewAny(User $user): bool
|
||||
{
|
||||
return $user->isAdmin();
|
||||
}
|
||||
|
||||
public function view(User $user, PersonalAccessToken $personalAccessToken): bool
|
||||
{
|
||||
return $user->isAdmin();
|
||||
}
|
||||
|
||||
public function create(User $user): bool
|
||||
{
|
||||
return $user->isAdmin();
|
||||
}
|
||||
|
||||
public function update(User $user, PersonalAccessToken $personalAccessToken): bool
|
||||
{
|
||||
return $user->isAdmin();
|
||||
}
|
||||
|
||||
public function delete(User $user, PersonalAccessToken $personalAccessToken): bool
|
||||
{
|
||||
return $user->isAdmin();
|
||||
}
|
||||
|
||||
public function deleteMany(User $user): bool
|
||||
{
|
||||
return $user->isAdmin();
|
||||
}
|
||||
}
|
@ -2,14 +2,15 @@
|
||||
|
||||
namespace App\Policies;
|
||||
|
||||
use App\Models\Project;
|
||||
use App\Models\Server;
|
||||
use App\Models\User;
|
||||
|
||||
class ServerPolicy
|
||||
{
|
||||
public function viewAny(User $user): bool
|
||||
public function viewAny(User $user, Project $project): bool
|
||||
{
|
||||
return $user->isAdmin() || $user->currentProject?->users->contains($user);
|
||||
return $user->isAdmin() || $project->users->contains($user);
|
||||
}
|
||||
|
||||
public function view(User $user, Server $server): bool
|
||||
@ -17,9 +18,9 @@ public function view(User $user, Server $server): bool
|
||||
return $user->isAdmin() || $server->project->users->contains($user);
|
||||
}
|
||||
|
||||
public function create(User $user): bool
|
||||
public function create(User $user, Project $project): bool
|
||||
{
|
||||
return $user->isAdmin() || $user->currentProject?->users->contains($user);
|
||||
return $user->isAdmin() || $project->users->contains($user);
|
||||
}
|
||||
|
||||
public function update(User $user, Server $server): bool
|
||||
|
@ -12,26 +12,29 @@ class ServerProviderPolicy
|
||||
|
||||
public function viewAny(User $user): bool
|
||||
{
|
||||
return $user->isAdmin();
|
||||
return true;
|
||||
}
|
||||
|
||||
public function view(User $user, ServerProvider $serverProvider): bool
|
||||
{
|
||||
return $user->isAdmin();
|
||||
return $user->isAdmin() ||
|
||||
$user->id === $serverProvider->user_id ||
|
||||
$serverProvider->project_id === null ||
|
||||
$serverProvider->project?->users()->where('user_id', $user->id)->exists();
|
||||
}
|
||||
|
||||
public function create(User $user): bool
|
||||
{
|
||||
return $user->isAdmin();
|
||||
return true;
|
||||
}
|
||||
|
||||
public function update(User $user, ServerProvider $serverProvider): bool
|
||||
{
|
||||
return $user->isAdmin();
|
||||
return $user->isAdmin() || $user->id === $serverProvider->user_id;
|
||||
}
|
||||
|
||||
public function delete(User $user, ServerProvider $serverProvider): bool
|
||||
{
|
||||
return $user->isAdmin();
|
||||
return $user->isAdmin() || $user->id === $serverProvider->user_id;
|
||||
}
|
||||
}
|
||||
|
Reference in New Issue
Block a user