Files
dsi-commander/app/Policies/LicencePolicy.php

54 lines
1.3 KiB
PHP

<?php
namespace App\Policies;
use App\Models\Licence;
use App\Models\User;
use Illuminate\Auth\Access\Response;
class LicencePolicy
{
/**
* Determine whether the user can view any models.
*/
public function viewAny(User $user): bool
{
return true; // Everyone can see the list (filtered in controller)
}
/**
* Determine whether the user can view the model.
*/
public function view(User $user, Licence $licence): bool
{
if ($user->hasRole('admin')) return true;
return $user->commune_id === $licence->commune_id;
}
/**
* Determine whether the user can create models.
*/
public function create(User $user): bool
{
return true; // Simple users can create
}
/**
* Determine whether the user can update the model.
*/
public function update(User $user, Licence $licence): bool
{
if ($user->hasRole('admin')) return true;
return $user->commune_id === $licence->commune_id;
}
/**
* Determine whether the user can delete the model.
*/
public function delete(User $user, Licence $licence): bool
{
if ($user->hasRole('admin')) return true;
return $user->commune_id === $licence->commune_id;
}
}