mirror of
https://github.com/pelican-dev/panel.git
synced 2025-05-20 07:34:45 +02:00

* add spatie/permissions * add policies * add role resource * add root admin role handling * replace some "root_admin" with function * add model specific permissions * make permission selection nicer * fix user creation * fix tests * add back subuser checks in server policy * add custom model for role * assign new users to role if root_admin is set * add api for roles * fix phpstan * add permissions for settings page * remove "restore" and "forceDelete" permissions * add user count to list * prevent deletion if role has users * update user list * fix server policy * remove old `root_admin` column * small refactor * fix tests * forgot can checks here * forgot use * disable editing own roles & disable assigning root admin * don't allow to rename root admin role * remove php bombing exception handler * fix role assignment when creating a user * fix disableOptionWhen * fix missing `root_admin` attribute on react frontend * add permission check for bulk delete * rename viewAny to viewList * improve canAccessPanel check * fix admin not displaying for non-root admins * make sure non root admins can't edit root admins * fix import * fix settings page permission check * fix server permissions for non-subusers * fix settings page permission check v2 * small cleanup * cleanup config file * move consts from resouce into enum & model * Update database/migrations/2024_08_01_114538_remove_root_admin_column.php Co-authored-by: Lance Pioch <lancepioch@gmail.com> * fix config * fix phpstan * fix phpstan 2.0 --------- Co-authored-by: Lance Pioch <lancepioch@gmail.com>
89 lines
2.6 KiB
PHP
89 lines
2.6 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Api\Application\Roles;
|
|
|
|
use Illuminate\Http\Response;
|
|
use Illuminate\Http\JsonResponse;
|
|
use App\Models\Role;
|
|
use Spatie\QueryBuilder\QueryBuilder;
|
|
use App\Transformers\Api\Application\RoleTransformer;
|
|
use App\Http\Controllers\Api\Application\ApplicationApiController;
|
|
use App\Http\Requests\Api\Application\Roles\GetRoleRequest;
|
|
use App\Http\Requests\Api\Application\Roles\StoreRoleRequest;
|
|
use App\Http\Requests\Api\Application\Roles\DeleteRoleRequest;
|
|
use App\Http\Requests\Api\Application\Roles\UpdateRoleRequest;
|
|
|
|
class RoleController extends ApplicationApiController
|
|
{
|
|
/**
|
|
* Return all the roles currently registered on the Panel.
|
|
*/
|
|
public function index(GetRoleRequest $request): array
|
|
{
|
|
$roles = QueryBuilder::for(Role::query())
|
|
->allowedFilters(['name'])
|
|
->allowedSorts(['name'])
|
|
->paginate($request->query('per_page') ?? 10);
|
|
|
|
return $this->fractal->collection($roles)
|
|
->transformWith($this->getTransformer(RoleTransformer::class))
|
|
->toArray();
|
|
}
|
|
|
|
/**
|
|
* Return a single role.
|
|
*/
|
|
public function view(GetRoleRequest $request, Role $role): array
|
|
{
|
|
return $this->fractal->item($role)
|
|
->transformWith($this->getTransformer(RoleTransformer::class))
|
|
->toArray();
|
|
}
|
|
|
|
/**
|
|
* Store a new role on the Panel and return an HTTP/201 response code with the
|
|
* new role attached.
|
|
*
|
|
* @throws \Throwable
|
|
*/
|
|
public function store(StoreRoleRequest $request): JsonResponse
|
|
{
|
|
$role = Role::create($request->validated());
|
|
|
|
return $this->fractal->item($role)
|
|
->transformWith($this->getTransformer(RoleTransformer::class))
|
|
->addMeta([
|
|
'resource' => route('api.application.roles.view', [
|
|
'role' => $role->id,
|
|
]),
|
|
])
|
|
->respond(201);
|
|
}
|
|
|
|
/**
|
|
* Update a role on the Panel and return the updated record to the user.
|
|
*
|
|
* @throws \Throwable
|
|
*/
|
|
public function update(UpdateRoleRequest $request, Role $role): array
|
|
{
|
|
$role->update($request->validated());
|
|
|
|
return $this->fractal->item($role)
|
|
->transformWith($this->getTransformer(RoleTransformer::class))
|
|
->toArray();
|
|
}
|
|
|
|
/**
|
|
* Delete a role from the Panel.
|
|
*
|
|
* @throws \Exception
|
|
*/
|
|
public function delete(DeleteRoleRequest $request, Role $role): Response
|
|
{
|
|
$role->delete();
|
|
|
|
return $this->returnNoContent();
|
|
}
|
|
}
|