LaDo/app/Policies/TodoPolicy.php

71 lines
1.6 KiB
PHP

<?php
namespace App\Policies;
use App\Models\Project;
use App\Models\Todo;
use App\Models\User;
use Illuminate\Auth\Access\Response;
class TodoPolicy
{
/**
* Determine whether the user can view any models.
*/
public function viewAny(User $user): bool
{
return false;
}
/**
* Determine whether the user can view the model.
*/
public function view(User $user, Todo $todo): bool
{
return $user->id === $todo->project->user->id;
}
/**
* Determine whether the user can create models.
*/
public function create(User $user): bool
{
return true;
}
/**
* Determine whether the user can update the model.
*/
public function update(User $user, Project $project, Todo $todo): bool
{
if (!$project || $project->user->id !== $user->id || $todo->user()[0]->id !== $user->id)
return false;
return $user->id === $todo->project->user->id;
}
/**
* Determine whether the user can delete the model.
*/
public function delete(User $user, Todo $todo): bool
{
return $user->id === $todo->project->user->id;
}
/**
* Determine whether the user can restore the model.
*/
public function restore(User $user, Todo $todo): bool
{
return $user->id === $todo->project->user->id;
}
/**
* Determine whether the user can permanently delete the model.
*/
public function forceDelete(User $user, Todo $todo): bool
{
return $user->id === $todo->project->user->id;
}
}