itstructure / laravel-rbac

src/RbacAuthServiceProvider.php

<?php

namespace Itstructure\LaRbac;

use Illuminate\Support\Facades\Gate;
use Illuminate\Foundation\Support\Providers\AuthServiceProvider;
use Itstructure\LaRbac\Models\Permission;
use Itstructure\LaRbac\Interfaces\{RbacUserInterface, RbacModelInterface};
use Itstructure\LaRbac\Classes\MemberToRole;

/**
 * Class RbacAuthServiceProvider
 *
 * @package Itstructure\LaRbac
 *
 * @author Andrey Girnik <girnikandrey@gmail.com>
 */
class RbacAuthServiceProvider extends AuthServiceProvider
{
    /**
     * Register any authentication / authorization services.
     * @return void
     */
    public function boot()
    {
        $this->registerPolicies();
        $this->registerRbacPolicies();
    }

    /**
     * Register Rbac policies.
     */
    public function registerRbacPolicies()
    {
        /*
        |--------------------------------------------------------------------------
        | ADMIN member section.
        |--------------------------------------------------------------------------
        */
        Gate::define(Permission::ADMINISTRATE_PERMISSION, function (RbacUserInterface $user) {
            return $user->hasAccess([
                Permission::ADMINISTRATE_PERMISSION
            ]);
        });

        Gate::define(Permission::ASSIGN_ROLE_FLAG, function (RbacUserInterface $user, MemberToRole $memberToRole) {
            return $user->canAssignRole($memberToRole->getMember(), $memberToRole->getRole());
        });

        Gate::define(Permission::DELETE_MEMBER_FLAG, function (RbacUserInterface $user, $memberKey) {
            return $user->getMemberKeyAttribute() != $memberKey;
        });


        /*
        |--------------------------------------------------------------------------
        | Record section for application.
        |--------------------------------------------------------------------------
        */
        Gate::define(Permission::VIEW_RECORD_PERMISSION, function (RbacUserInterface $user, RbacModelInterface $model = null) {
            return $user->hasAccess([
                Permission::VIEW_RECORD_PERMISSION
            ]) || !empty($model) ? $user->getMemberKeyAttribute() == $model->getAuthorIdAttribute() : false;

The method getAuthorIdAttribute() does not exist on null.

        });

        Gate::define(Permission::CREATE_RECORD_PERMISSION, function (RbacUserInterface $user) {
            return $user->hasAccess([
                Permission::CREATE_RECORD_PERMISSION
            ]);
        });

        Gate::define(Permission::UPDATE_RECORD_PERMISSION, function (RbacUserInterface $user, RbacModelInterface $model = null) {
            return $user->hasAccess([
                Permission::UPDATE_RECORD_PERMISSION
            ]) || !empty($model) ? $user->getMemberKeyAttribute() == $model->getAuthorIdAttribute() : false;
        });

        Gate::define(Permission::DELETE_RECORD_PERMISSION, function (RbacUserInterface $user, RbacModelInterface $model = null) {
            return $user->hasAccess([
                Permission::DELETE_RECORD_PERMISSION
            ]) || !empty($model) ? $user->getMemberKeyAttribute() == $model->getAuthorIdAttribute() : false;
        });

        Gate::define(Permission::PUBLISH_RECORD_PERMISSION, function (RbacUserInterface $user) {
            return $user->hasAccess([
                Permission::PUBLISH_RECORD_PERMISSION
            ]);
        });
    }
}