45

backend/app/Models/User.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Foundation\Auth\User as Authenticatable;
+use Illuminate\Notifications\Notifiable;
+
+/** Compte du back-office (connexion SSO Entra uniquement). */
+class User extends Authenticatable
+{
+    use HasFactory, Notifiable;
+
+    public const ROLE_RANK = ['editor' => 1, 'admin' => 2, 'superadmin' => 3];
+
+    protected $fillable = ['name', 'email', 'tenant_id', 'entra_oid', 'role'];
+
+    protected $hidden = ['password', 'remember_token'];
+
+    public function tenant(): BelongsTo { return $this->belongsTo(Tenant::class); }
+
+    public function hasRole(string $minimum): bool
+    {
+        return (self::ROLE_RANK[$this->role] ?? 0) >= (self::ROLE_RANK[$minimum] ?? PHP_INT_MAX);
+    }
+}