 fc643f57f9
			
		
	
	
		fc643f57f9
		
			
		
	
	
	
	
		
			
			* add spatie/permissions * add policies * add role resource * add root admin role handling * replace some "root_admin" with function * add model specific permissions * make permission selection nicer * fix user creation * fix tests * add back subuser checks in server policy * add custom model for role * assign new users to role if root_admin is set * add api for roles * fix phpstan * add permissions for settings page * remove "restore" and "forceDelete" permissions * add user count to list * prevent deletion if role has users * update user list * fix server policy * remove old `root_admin` column * small refactor * fix tests * forgot can checks here * forgot use * disable editing own roles & disable assigning root admin * don't allow to rename root admin role * remove php bombing exception handler * fix role assignment when creating a user * fix disableOptionWhen * fix missing `root_admin` attribute on react frontend * add permission check for bulk delete * rename viewAny to viewList * improve canAccessPanel check * fix admin not displaying for non-root admins * make sure non root admins can't edit root admins * fix import * fix settings page permission check * fix server permissions for non-subusers * fix settings page permission check v2 * small cleanup * cleanup config file * move consts from resouce into enum & model * Update database/migrations/2024_08_01_114538_remove_root_admin_column.php Co-authored-by: Lance Pioch <lancepioch@gmail.com> * fix config * fix phpstan * fix phpstan 2.0 --------- Co-authored-by: Lance Pioch <lancepioch@gmail.com>
		
			
				
	
	
		
			49 lines
		
	
	
		
			1.0 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			49 lines
		
	
	
		
			1.0 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
| <?php
 | |
| 
 | |
| namespace App\Models;
 | |
| 
 | |
| use Spatie\Permission\Models\Role as BaseRole;
 | |
| 
 | |
| /**
 | |
|  * @property int $id
 | |
|  * @property string $name
 | |
|  * @property string $guard_name
 | |
|  * @property \Illuminate\Database\Eloquent\Collection|\Spatie\Permission\Models\Permission[] $permissions
 | |
|  * @property int|null $permissions_count
 | |
|  * @property \Illuminate\Database\Eloquent\Collection|\App\Models\User[] $users
 | |
|  * @property int|null $users_count
 | |
|  */
 | |
| class Role extends BaseRole
 | |
| {
 | |
|     public const RESOURCE_NAME = 'role';
 | |
| 
 | |
|     public const ROOT_ADMIN = 'Root Admin';
 | |
| 
 | |
|     public const MODEL_SPECIFIC_PERMISSIONS = [
 | |
|         'egg' => [
 | |
|             'import',
 | |
|             'export',
 | |
|         ],
 | |
|     ];
 | |
| 
 | |
|     public const SPECIAL_PERMISSIONS = [
 | |
|         'settings' => [
 | |
|             'view',
 | |
|             'update',
 | |
|         ],
 | |
|     ];
 | |
| 
 | |
|     public function isRootAdmin(): bool
 | |
|     {
 | |
|         return $this->name === self::ROOT_ADMIN;
 | |
|     }
 | |
| 
 | |
|     public static function getRootAdmin(): self
 | |
|     {
 | |
|         /** @var self $role */
 | |
|         $role = self::findOrCreate(self::ROOT_ADMIN);
 | |
| 
 | |
|         return $role;
 | |
|     }
 | |
| }
 |