netgescon-master/_BACKUP_OLD_netgescon-laravel_INACTIVE/app/Policies/VoceSpesaPolicy.php

91 lines
2.1 KiB
PHP

<?php
namespace App\Policies;
use App\Models\VoceSpesa;
use App\Models\User;
use Illuminate\Auth\Access\Response;
class VoceSpesaPolicy
{
/**
* Determine whether the user can view any models.
*/
public function viewAny(User $user): bool
{
return $user->hasRole(['admin', 'amministratore']);
}
/**
* Determine whether the user can view the model.
*/
public function view(User $user, VoceSpesa $voceSpesa): bool
{
if ($user->hasRole('admin')) {
return true;
}
if ($user->hasRole('amministratore')) {
return $voceSpesa->stabile->amministratore_id === $user->amministratore->id_amministratore;
}
return false;
}
/**
* Determine whether the user can create models.
*/
public function create(User $user): bool
{
return $user->hasRole(['admin', 'amministratore']);
}
/**
* Determine whether the user can update the model.
*/
public function update(User $user, VoceSpesa $voceSpesa): bool
{
if ($user->hasRole('admin')) {
return true;
}
if ($user->hasRole('amministratore')) {
return $voceSpesa->stabile->amministratore_id === $user->amministratore->id_amministratore;
}
return false;
}
/**
* Determine whether the user can delete the model.
*/
public function delete(User $user, VoceSpesa $voceSpesa): bool
{
if ($user->hasRole('admin')) {
return true;
}
if ($user->hasRole('amministratore')) {
return $voceSpesa->stabile->amministratore_id === $user->amministratore->id_amministratore;
}
return false;
}
/**
* Determine whether the user can restore the model.
*/
public function restore(User $user, VoceSpesa $voceSpesa): bool
{
return $this->delete($user, $voceSpesa);
}
/**
* Determine whether the user can permanently delete the model.
*/
public function forceDelete(User $user, VoceSpesa $voceSpesa): bool
{
return $user->hasRole('admin');
}
}