
* add spatie/permissions * add policies * add role resource * add root admin role handling * replace some "root_admin" with function * add model specific permissions * make permission selection nicer * fix user creation * fix tests * add back subuser checks in server policy * add custom model for role * assign new users to role if root_admin is set * add api for roles * fix phpstan * add permissions for settings page * remove "restore" and "forceDelete" permissions * add user count to list * prevent deletion if role has users * update user list * fix server policy * remove old `root_admin` column * small refactor * fix tests * forgot can checks here * forgot use * disable editing own roles & disable assigning root admin * don't allow to rename root admin role * remove php bombing exception handler * fix role assignment when creating a user * fix disableOptionWhen * fix missing `root_admin` attribute on react frontend * add permission check for bulk delete * rename viewAny to viewList * improve canAccessPanel check * fix admin not displaying for non-root admins * make sure non root admins can't edit root admins * fix import * fix settings page permission check * fix server permissions for non-subusers * fix settings page permission check v2 * small cleanup * cleanup config file * move consts from resouce into enum & model * Update database/migrations/2024_08_01_114538_remove_root_admin_column.php Co-authored-by: Lance Pioch <lancepioch@gmail.com> * fix config * fix phpstan * fix phpstan 2.0 --------- Co-authored-by: Lance Pioch <lancepioch@gmail.com>
141 lines
6.4 KiB
PHP
141 lines
6.4 KiB
PHP
<?php
|
|
|
|
use Illuminate\Support\Facades\Schema;
|
|
use Illuminate\Database\Schema\Blueprint;
|
|
use Illuminate\Database\Migrations\Migration;
|
|
|
|
return new class extends Migration
|
|
{
|
|
/**
|
|
* Run the migrations.
|
|
*/
|
|
public function up(): void
|
|
{
|
|
$teams = config('permission.teams');
|
|
$tableNames = config('permission.table_names');
|
|
$columnNames = config('permission.column_names');
|
|
$pivotRole = $columnNames['role_pivot_key'] ?? 'role_id';
|
|
$pivotPermission = $columnNames['permission_pivot_key'] ?? 'permission_id';
|
|
|
|
if (empty($tableNames)) {
|
|
throw new \Exception('Error: config/permission.php not loaded. Run [php artisan config:clear] and try again.');
|
|
}
|
|
if ($teams && empty($columnNames['team_foreign_key'] ?? null)) {
|
|
throw new \Exception('Error: team_foreign_key on config/permission.php not loaded. Run [php artisan config:clear] and try again.');
|
|
}
|
|
|
|
Schema::create($tableNames['permissions'], function (Blueprint $table) {
|
|
//$table->engine('InnoDB');
|
|
$table->bigIncrements('id'); // permission id
|
|
$table->string('name'); // For MyISAM use string('name', 225); // (or 166 for InnoDB with Redundant/Compact row format)
|
|
$table->string('guard_name'); // For MyISAM use string('guard_name', 25);
|
|
$table->timestamps();
|
|
|
|
$table->unique(['name', 'guard_name']);
|
|
});
|
|
|
|
Schema::create($tableNames['roles'], function (Blueprint $table) use ($teams, $columnNames) {
|
|
//$table->engine('InnoDB');
|
|
$table->bigIncrements('id'); // role id
|
|
if ($teams || config('permission.testing')) { // permission.testing is a fix for sqlite testing
|
|
$table->unsignedBigInteger($columnNames['team_foreign_key'])->nullable();
|
|
$table->index($columnNames['team_foreign_key'], 'roles_team_foreign_key_index');
|
|
}
|
|
$table->string('name'); // For MyISAM use string('name', 225); // (or 166 for InnoDB with Redundant/Compact row format)
|
|
$table->string('guard_name'); // For MyISAM use string('guard_name', 25);
|
|
$table->timestamps();
|
|
if ($teams || config('permission.testing')) {
|
|
$table->unique([$columnNames['team_foreign_key'], 'name', 'guard_name']);
|
|
} else {
|
|
$table->unique(['name', 'guard_name']);
|
|
}
|
|
});
|
|
|
|
Schema::create($tableNames['model_has_permissions'], function (Blueprint $table) use ($tableNames, $columnNames, $pivotPermission, $teams) {
|
|
$table->unsignedBigInteger($pivotPermission);
|
|
|
|
$table->string('model_type');
|
|
$table->unsignedBigInteger($columnNames['model_morph_key']);
|
|
$table->index([$columnNames['model_morph_key'], 'model_type'], 'model_has_permissions_model_id_model_type_index');
|
|
|
|
$table->foreign($pivotPermission)
|
|
->references('id') // permission id
|
|
->on($tableNames['permissions'])
|
|
->onDelete('cascade');
|
|
if ($teams) {
|
|
$table->unsignedBigInteger($columnNames['team_foreign_key']);
|
|
$table->index($columnNames['team_foreign_key'], 'model_has_permissions_team_foreign_key_index');
|
|
|
|
$table->primary([$columnNames['team_foreign_key'], $pivotPermission, $columnNames['model_morph_key'], 'model_type'],
|
|
'model_has_permissions_permission_model_type_primary');
|
|
} else {
|
|
$table->primary([$pivotPermission, $columnNames['model_morph_key'], 'model_type'],
|
|
'model_has_permissions_permission_model_type_primary');
|
|
}
|
|
|
|
});
|
|
|
|
Schema::create($tableNames['model_has_roles'], function (Blueprint $table) use ($tableNames, $columnNames, $pivotRole, $teams) {
|
|
$table->unsignedBigInteger($pivotRole);
|
|
|
|
$table->string('model_type');
|
|
$table->unsignedBigInteger($columnNames['model_morph_key']);
|
|
$table->index([$columnNames['model_morph_key'], 'model_type'], 'model_has_roles_model_id_model_type_index');
|
|
|
|
$table->foreign($pivotRole)
|
|
->references('id') // role id
|
|
->on($tableNames['roles'])
|
|
->onDelete('cascade');
|
|
if ($teams) {
|
|
$table->unsignedBigInteger($columnNames['team_foreign_key']);
|
|
$table->index($columnNames['team_foreign_key'], 'model_has_roles_team_foreign_key_index');
|
|
|
|
$table->primary([$columnNames['team_foreign_key'], $pivotRole, $columnNames['model_morph_key'], 'model_type'],
|
|
'model_has_roles_role_model_type_primary');
|
|
} else {
|
|
$table->primary([$pivotRole, $columnNames['model_morph_key'], 'model_type'],
|
|
'model_has_roles_role_model_type_primary');
|
|
}
|
|
});
|
|
|
|
Schema::create($tableNames['role_has_permissions'], function (Blueprint $table) use ($tableNames, $pivotRole, $pivotPermission) {
|
|
$table->unsignedBigInteger($pivotPermission);
|
|
$table->unsignedBigInteger($pivotRole);
|
|
|
|
$table->foreign($pivotPermission)
|
|
->references('id') // permission id
|
|
->on($tableNames['permissions'])
|
|
->onDelete('cascade');
|
|
|
|
$table->foreign($pivotRole)
|
|
->references('id') // role id
|
|
->on($tableNames['roles'])
|
|
->onDelete('cascade');
|
|
|
|
$table->primary([$pivotPermission, $pivotRole], 'role_has_permissions_permission_id_role_id_primary');
|
|
});
|
|
|
|
app('cache')
|
|
->store(config('permission.cache.store') != 'default' ? config('permission.cache.store') : null)
|
|
->forget(config('permission.cache.key'));
|
|
}
|
|
|
|
/**
|
|
* Reverse the migrations.
|
|
*/
|
|
public function down(): void
|
|
{
|
|
$tableNames = config('permission.table_names');
|
|
|
|
if (empty($tableNames)) {
|
|
throw new \Exception('Error: config/permission.php not found and defaults could not be merged. Please publish the package configuration before proceeding, or drop the tables manually.');
|
|
}
|
|
|
|
Schema::drop($tableNames['role_has_permissions']);
|
|
Schema::drop($tableNames['model_has_roles']);
|
|
Schema::drop($tableNames['model_has_permissions']);
|
|
Schema::drop($tableNames['roles']);
|
|
Schema::drop($tableNames['permissions']);
|
|
}
|
|
};
|