fc643f57f9
* add spatie/permissions * add policies * add role resource * add root admin role handling * replace some "root_admin" with function * add model specific permissions * make permission selection nicer * fix user creation * fix tests * add back subuser checks in server policy * add custom model for role * assign new users to role if root_admin is set * add api for roles * fix phpstan * add permissions for settings page * remove "restore" and "forceDelete" permissions * add user count to list * prevent deletion if role has users * update user list * fix server policy * remove old `root_admin` column * small refactor * fix tests * forgot can checks here * forgot use * disable editing own roles & disable assigning root admin * don't allow to rename root admin role * remove php bombing exception handler * fix role assignment when creating a user * fix disableOptionWhen * fix missing `root_admin` attribute on react frontend * add permission check for bulk delete * rename viewAny to viewList * improve canAccessPanel check * fix admin not displaying for non-root admins * make sure non root admins can't edit root admins * fix import * fix settings page permission check * fix server permissions for non-subusers * fix settings page permission check v2 * small cleanup * cleanup config file * move consts from resouce into enum & model * Update database/migrations/2024_08_01_114538_remove_root_admin_column.php Co-authored-by: Lance Pioch <lancepioch@gmail.com> * fix config * fix phpstan * fix phpstan 2.0 --------- Co-authored-by: Lance Pioch <lancepioch@gmail.com>
83 lines
2.4 KiB
PHP
83 lines
2.4 KiB
PHP
<?php
|
|
|
|
namespace App\Transformers\Api\Application;
|
|
|
|
use App\Models\Role;
|
|
use App\Models\User;
|
|
use League\Fractal\Resource\Collection;
|
|
use League\Fractal\Resource\NullResource;
|
|
use App\Services\Acl\Api\AdminAcl;
|
|
|
|
class UserTransformer extends BaseTransformer
|
|
{
|
|
/**
|
|
* List of resources that can be included.
|
|
*/
|
|
protected array $availableIncludes = [
|
|
'servers',
|
|
'roles',
|
|
];
|
|
|
|
/**
|
|
* Return the resource name for the JSONAPI output.
|
|
*/
|
|
public function getResourceName(): string
|
|
{
|
|
return User::RESOURCE_NAME;
|
|
}
|
|
|
|
/**
|
|
* Return a transformed User model that can be consumed by external services.
|
|
*/
|
|
public function transform(User $user): array
|
|
{
|
|
return [
|
|
'id' => $user->id,
|
|
'external_id' => $user->external_id,
|
|
'uuid' => $user->uuid,
|
|
'username' => $user->username,
|
|
'email' => $user->email,
|
|
'first_name' => $user->name_first,
|
|
'last_name' => $user->name_last,
|
|
'language' => $user->language,
|
|
'root_admin' => $user->isRootAdmin(),
|
|
'2fa_enabled' => (bool) $user->use_totp,
|
|
'2fa' => (bool) $user->use_totp, // deprecated, use "2fa_enabled"
|
|
'created_at' => $this->formatTimestamp($user->created_at),
|
|
'updated_at' => $this->formatTimestamp($user->updated_at),
|
|
];
|
|
}
|
|
|
|
/**
|
|
* Return the servers associated with this user.
|
|
*
|
|
* @throws \App\Exceptions\Transformer\InvalidTransformerLevelException
|
|
*/
|
|
public function includeServers(User $user): Collection|NullResource
|
|
{
|
|
if (!$this->authorize(AdminAcl::RESOURCE_SERVERS)) {
|
|
return $this->null();
|
|
}
|
|
|
|
$user->loadMissing('servers');
|
|
|
|
return $this->collection($user->getRelation('servers'), $this->makeTransformer(ServerTransformer::class), 'server');
|
|
}
|
|
|
|
/**
|
|
* Return the roles associated with this user.
|
|
*
|
|
* @throws \App\Exceptions\Transformer\InvalidTransformerLevelException
|
|
*/
|
|
public function includeRoles(User $user): Collection|NullResource
|
|
{
|
|
if (!$this->authorize(AdminAcl::RESOURCE_ROLES)) {
|
|
return $this->null();
|
|
}
|
|
|
|
$user->loadMissing('roles');
|
|
|
|
return $this->collection($user->getRelation('roles'), $this->makeTransformer(RoleTransformer::class), Role::RESOURCE_NAME);
|
|
}
|
|
}
|