App\Providers\AuthServiceProvider

Complexity

Total Complexity

22

Size/Duplication

Total Lines	109
Duplicated Lines	0 %

Importance

Changes	1
Bugs	0	Features	0

1 Method

Rating	Name	Duplication	Size	Complexity
D	boot()	0	93	22

<?php

namespace App\Providers;

use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
use Illuminate\Support\Facades\Gate;

class AuthServiceProvider extends ServiceProvider
{
    /**
     * The policy mappings for the application.
     *
     * @var array
     */
    protected $policies = [
        'App\\Model' => 'App\\Policies\\ModelPolicy',
    ];

    /**
     * Register any authentication / authorization services.
     *
     * @return void
     */
    public function boot()
    {
        $this->registerPolicies();

        /*
         * a user is allowed to edit the course grades if they are the teacher for this course,
         * or if they have explicit permission to do so
         */
        Gate::define('edit-course-grades', function ($user, $course) {
            return $user->isTeacher() && $user->teacher_id == $course->teacher_id || $user->can('evaluation.edit');
        });

        /*
         * a user is allowed to view the course attendance sheet if they are the teacher for this course,
         * or if they have explicit permission to view all course attendance sheets
         */
        Gate::define('view-course-attendance', function ($user, $course) {
            return $user->isTeacher() && $user->teacher_id == $course->teacher_id || $user->can('attendance.view');
        });

        /*
         * a user is allowed to view the event attendance sheet if they are the teacher for this event,
         * if they are the teacher for this course,
         * or if they have explicit permission to view all event attendance sheets
         */
        Gate::define('view-event-attendance', function ($user, $event) {
            return ($event->teacher_id == $user->teacher_id) || ($event->course->teacher_id == $user->teacher_id) || $user->can('attendance.view');
        });

        /*
         * a user is allowed to edit an attendance sheet if they are the teacher for the event,
         * if they are the teacher for the course,
         * or if they have explicit permission to edit any attendance sheets
         */
        Gate::define('edit-attendance', function ($user, $event) {
            return ($event->teacher_id == $user->teacher_id) || ($event->course->teacher_id == $user->teacher_id) || $user->can('attendance.edit');
        });

        /*
         * teachers are allowed to view their own calendar,
         * and users with explicit permission can view all calendars
         */
        Gate::define('view-teacher-calendar', function ($user, $teacher) {
            return ($user->isTeacher() && $user->teacher_id == $teacher->id) || $user->can('calendars.view');
        });

        /*
         * teachers are allowed to view their own courses,
         * and users with explicit permission can view all courses
         */
        Gate::define('view-course', function ($user, $course) {
            return ($user->isTeacher() && $user->teacher_id == $course->teacher_id) || $user->can('courses.view');
        });

        /*
         * the user is allowed to view the result if they are the student,
         * if they are a teacher
         * of if they have explicit permission to view any result
         */
        Gate::define('view-enrollment', function ($user, $enrollment) {
            return ($user->isStudent() && $user->student_id == $enrollment->student_id) || $user->isTeacher() || $user->can('evaluation.view');
        });

        /*
         * if the user is the teacher of the course
         * of if they have explicit permission to enroll students
         */
        Gate::define('enroll-in-course', function ($user, $course) {
            return $course->teacher_id == $user->teacher_id || $user->can('enrollments.edit');
        });

        /*
         * if the user is a teacher
         * of if they have explicit permission to enroll students
         */
        Gate::define('enroll-students', function ($user) {
            return $user->isTeacher() || $user->can('enrollments.edit');
        });

        /*
         * teachers are allowed to view their own hours,
         * and users with explicit permission can view all hours
         */
        Gate::define('view-teacher-hours', function ($user, $teacher) {
            return ($user->isTeacher() && $user->teacher_id == $teacher->id) || $user->can('hr.view');
        });

        /*
         * teachers are allowed to edit results for their own students
         * as well as users with explicit permission to edit any result
         */
        Gate::define('edit-result', function ($user, $enrollment) {
            return ($user->isTeacher() && $user->teacher_id == $enrollment->course->teacher_id) || $user->can('evaluation.edit');
        });
    }
}