* add spatie/permissions * add policies * add role resource * add root admin role handling * replace some "root_admin" with function * add model specific permissions * make permission selection nicer * fix user creation * fix tests * add back subuser checks in server policy * add custom model for role * assign new users to role if root_admin is set * add api for roles * fix phpstan * add permissions for settings page * remove "restore" and "forceDelete" permissions * add user count to list * prevent deletion if role has users * update user list * fix server policy * remove old `root_admin` column * small refactor * fix tests * forgot can checks here * forgot use * disable editing own roles & disable assigning root admin * don't allow to rename root admin role * remove php bombing exception handler * fix role assignment when creating a user * fix disableOptionWhen * fix missing `root_admin` attribute on react frontend * add permission check for bulk delete * rename viewAny to viewList * improve canAccessPanel check * fix admin not displaying for non-root admins * make sure non root admins can't edit root admins * fix import * fix settings page permission check * fix server permissions for non-subusers * fix settings page permission check v2 * small cleanup * cleanup config file * move consts from resouce into enum & model * Update database/migrations/2024_08_01_114538_remove_root_admin_column.php Co-authored-by: Lance Pioch <lancepioch@gmail.com> * fix config * fix phpstan * fix phpstan 2.0 --------- Co-authored-by: Lance Pioch <lancepioch@gmail.com>
		
			
				
	
	
		
			64 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
			
		
		
	
	
			64 lines
		
	
	
		
			1.7 KiB
		
	
	
	
		
			PHP
		
	
	
	
	
	
<?php
 | 
						|
 | 
						|
namespace App\Services\Users;
 | 
						|
 | 
						|
use App\Models\Role;
 | 
						|
use Ramsey\Uuid\Uuid;
 | 
						|
use App\Models\User;
 | 
						|
use Illuminate\Contracts\Hashing\Hasher;
 | 
						|
use Illuminate\Database\ConnectionInterface;
 | 
						|
use Illuminate\Contracts\Auth\PasswordBroker;
 | 
						|
use App\Notifications\AccountCreated;
 | 
						|
 | 
						|
class UserCreationService
 | 
						|
{
 | 
						|
    /**
 | 
						|
     * UserCreationService constructor.
 | 
						|
     */
 | 
						|
    public function __construct(
 | 
						|
        private ConnectionInterface $connection,
 | 
						|
        private Hasher $hasher,
 | 
						|
        private PasswordBroker $passwordBroker,
 | 
						|
    ) {
 | 
						|
    }
 | 
						|
 | 
						|
    /**
 | 
						|
     * Create a new user on the system.
 | 
						|
     *
 | 
						|
     * @throws \Exception
 | 
						|
     * @throws \App\Exceptions\Model\DataValidationException
 | 
						|
     */
 | 
						|
    public function handle(array $data): User
 | 
						|
    {
 | 
						|
        if (array_key_exists('password', $data) && !empty($data['password'])) {
 | 
						|
            $data['password'] = $this->hasher->make($data['password']);
 | 
						|
        }
 | 
						|
 | 
						|
        $this->connection->beginTransaction();
 | 
						|
        if (empty($data['password'])) {
 | 
						|
            $generateResetToken = true;
 | 
						|
            $data['password'] = $this->hasher->make(str_random(30));
 | 
						|
        }
 | 
						|
 | 
						|
        $isRootAdmin = array_key_exists('root_admin', $data) && $data['root_admin'];
 | 
						|
        unset($data['root_admin']);
 | 
						|
 | 
						|
        $user = User::query()->forceCreate(array_merge($data, [
 | 
						|
            'uuid' => Uuid::uuid4()->toString(),
 | 
						|
        ]));
 | 
						|
 | 
						|
        if ($isRootAdmin) {
 | 
						|
            $user->syncRoles(Role::getRootAdmin());
 | 
						|
        }
 | 
						|
 | 
						|
        if (isset($generateResetToken)) {
 | 
						|
            $token = $this->passwordBroker->createToken($user);
 | 
						|
        }
 | 
						|
 | 
						|
        $this->connection->commit();
 | 
						|
        $user->notify(new AccountCreated($user, $token ?? null));
 | 
						|
 | 
						|
        return $user;
 | 
						|
    }
 | 
						|
}
 |