Cortex\Fort\Policies\UserPolicy

Complexity

Total Complexity

9

Size/Duplication

Total Lines	63
Duplicated Lines	0 %

Coupling/Cohesion

Components	1
Dependencies	3

Importance

Changes

0

4 Methods

Rating	Name	Duplication	Size	Complexity
A	list()	0	4	1
A	create()	0	4	1
A	update()	0	6	3
A	delete()	0	7	4

<?php

declare(strict_types=1);

namespace Cortex\Fort\Policies;

use Rinvex\Fort\Models\User;
use Illuminate\Auth\Access\HandlesAuthorization;

class UserPolicy
{
    use HandlesAuthorization;

    /**
     * Determine whether the user can list users.
     *
     * @param string                   $ability
     * @param \Rinvex\Fort\Models\User $user
     *
     * @return bool
     */
    public function list($ability, User $user): bool
    {
        return $user->allAbilities->pluck('slug')->contains($ability);
    }

    /**
     * Determine whether the user can create users.
     *
     * @param string                   $ability
     * @param \Rinvex\Fort\Models\User $user
     *
     * @return bool
     */
    public function create($ability, User $user): bool
    {
        return $user->allAbilities->pluck('slug')->contains($ability);
    }

    /**
     * Determine whether the user can update the user.
     *
     * @param string                   $ability
     * @param \Rinvex\Fort\Models\User $user
     * @param \Rinvex\Fort\Models\User $resource
     *
     * @return bool
     */
    public function update($ability, User $user, User $resource): bool
    {
        return $user->allAbilities->pluck('slug')->contains($ability)   // User can update users
               && ! $resource->isSuperadmin()                           // RESOURCE user is NOT superadmin
               && ! $resource->isProtected();                           // RESOURCE user is NOT protected
    }

    /**
     * Determine whether the user can delete the user.
     *
     * @param string                   $ability
     * @param \Rinvex\Fort\Models\User $user
     * @param \Rinvex\Fort\Models\User $resource
     *
     * @return bool
     */
    public function delete($ability, User $user, User $resource): bool
    {
        return $user->allAbilities->pluck('slug')->contains($ability)   // User can delete users
               && $resource->getKey() !== $user->getKey()               // User can NOT delete himself
               && ! $resource->isSuperadmin()                           // RESOURCE user is NOT superadmin
               && ! $resource->isProtected();                           // RESOURCE user is NOT protected
    }
}