App\Policies\UserPolicy

Complexity

Total Complexity

5

Size/Duplication

Total Lines	35
Duplicated Lines	0 %

Test Coverage

Coverage

83.33%

Importance

Changes	2
Bugs	0	Features	0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	manage()	0	3	1
A	update()	0	14	3
A	create()	0	3	1

<?php

namespace App\Policies;

use App\Models\User;
use App\Traits\AllowTrait;

use Illuminate\Auth\Access\Response;
use Illuminate\Auth\Access\HandlesAuthorization;

class UserPolicy
{
    use AllowTrait;

The trait App\Traits\AllowTrait requires some properties which are not provided by App\Policies\UserPolicy: $role_id, $username, $allow

    use HandlesAuthorization;

    public function manage(User $user)
    {
        return $this->checkPermission($user, 'Manage Users');
    }

    /**
     * Determine whether the user can create models
     */
    public function create(User $user)
    {
        return $this->checkPermission($user, 'Manage Users');
    }

    /**
     * Determine whether the user can update the user profile
     */
    public function update(User $user, User $model)
    {
        if($this->checkPermission($user, 'Manage Users'))
        {
            //  If they user has permission to Manage Users, they cannot manage anyone with a higher role than themselves
            if($user->role_id > $model->role_id)
            {
                return Response::deny('You cannot modify a user with higher permissions than yourself');
            }

            return true;
        }

        return $user->user_id === $model->user_id;
    }
}