Completed
Pull Request — master (#1048)
by
unknown
02:06
created

HasPermissions::getDefaultGuardName()   A

Complexity

Conditions 1
Paths 1

Size

Total Lines 4

Duplication

Lines 0
Ratio 0 %

Importance

Changes 0
Metric Value
cc 1
nc 1
nop 0
dl 0
loc 4
rs 10
c 0
b 0
f 0
1
<?php
2
3
namespace Spatie\Permission\Traits;
4
5
use Spatie\Permission\Guard;
6
use Illuminate\Support\Collection;
7
use Illuminate\Database\Eloquent\Builder;
8
use Spatie\Permission\PermissionRegistrar;
9
use Spatie\Permission\Contracts\Permission;
10
use Spatie\Permission\Exceptions\GuardDoesNotMatch;
11
use Illuminate\Database\Eloquent\Relations\MorphToMany;
12
use Spatie\Permission\Exceptions\PermissionDoesNotExist;
13
14
trait HasPermissions
15
{
16
    private $permissionClass;
17
18
    public static function bootHasPermissions()
19
    {
20
        static::deleting(function ($model) {
21
            if (method_exists($model, 'isForceDeleting') && ! $model->isForceDeleting()) {
22
                return;
23
            }
24
25
            $model->permissions()->detach();
26
        });
27
    }
28
29
    public function getPermissionClass()
30
    {
31
        if (! isset($this->permissionClass)) {
32
            $this->permissionClass = app(PermissionRegistrar::class)->getPermissionClass();
33
        }
34
35
        return $this->permissionClass;
36
    }
37
38
    /**
39
     * A model may have multiple direct permissions.
40
     */
41
    public function permissions(): MorphToMany
42
    {
43
        return $this->morphToMany(
0 ignored issues
show
Bug introduced by
It seems like morphToMany() must be provided by classes using this trait. How about adding it as abstract method to this trait?

This check looks for methods that are used by a trait but not required by it.

To illustrate, let’s look at the following code example

trait Idable {
    public function equalIds(Idable $other) {
        return $this->getId() === $other->getId();
    }
}

The trait Idable provides a method equalsId that in turn relies on the method getId(). If this method does not exist on a class mixing in this trait, the method will fail.

Adding the getId() as an abstract method to the trait will make sure it is available.

Loading history...
44
            config('permission.models.permission'),
45
            'model',
46
            config('permission.table_names.model_has_permissions'),
47
            config('permission.column_names.model_morph_key'),
48
            'permission_id'
49
        );
50
    }
51
52
    /**
53
     * Scope the model query to certain permissions only.
54
     *
55
     * @param \Illuminate\Database\Eloquent\Builder $query
56
     * @param string|array|\Spatie\Permission\Contracts\Permission|\Illuminate\Support\Collection $permissions
57
     *
58
     * @return \Illuminate\Database\Eloquent\Builder
59
     */
60
    public function scopePermission(Builder $query, $permissions): Builder
61
    {
62
        $permissions = $this->convertToPermissionModels($permissions);
63
64
        $rolesWithPermissions = array_unique(array_reduce($permissions, function ($result, $permission) {
65
            return array_merge($result, $permission->roles->all());
66
        }, []));
67
68
        return $query->where(function ($query) use ($permissions, $rolesWithPermissions) {
69
            $query->whereHas('permissions', function ($query) use ($permissions) {
70
                $query->where(function ($query) use ($permissions) {
71
                    foreach ($permissions as $permission) {
72
                        $query->orWhere(config('permission.table_names.permissions').'.id', $permission->id);
73
                    }
74
                });
75
            });
76
            if (count($rolesWithPermissions) > 0) {
77
                $query->orWhereHas('roles', function ($query) use ($rolesWithPermissions) {
78
                    $query->where(function ($query) use ($rolesWithPermissions) {
79
                        foreach ($rolesWithPermissions as $role) {
80
                            $query->orWhere(config('permission.table_names.roles').'.id', $role->id);
81
                        }
82
                    });
83
                });
84
            }
85
        });
86
    }
87
88
    /**
89
     * @param string|array|\Spatie\Permission\Contracts\Permission|\Illuminate\Support\Collection $permissions
90
     *
91
     * @return array
92
     */
93
    protected function convertToPermissionModels($permissions): array
94
    {
95
        if ($permissions instanceof Collection) {
96
            $permissions = $permissions->all();
97
        }
98
99
        $permissions = is_array($permissions) ? $permissions : [$permissions];
100
101
        return array_map(function ($permission) {
102
            if ($permission instanceof Permission) {
103
                return $permission;
104
            }
105
106
            return $this->getPermissionClass()->findByName($permission, $this->getDefaultGuardName());
107
        }, $permissions);
108
    }
109
110
    /**
111
     * Determine if the model may perform the given permission.
112
     *
113
     * @param string|int|\Spatie\Permission\Contracts\Permission $permission
114
     * @param string|null $guardName
115
     *
116
     * @return bool
117
     * @throws PermissionDoesNotExist
118
     */
119
    public function hasPermissionTo($permission, $guardName = null): bool
120
    {
121
        if (! is_string($permission) && ! is_int($permission) && ! $permission instanceof Permission) {
122
            throw new PermissionDoesNotExist;
123
        }
124
125
        $registrar = app(PermissionRegistrar::class);
126
        if (! $registrar::$cacheIsTaggable) {
127
            return $this->hasUncachedPermissionTo($permission, $guardName);
128
        }
129
130
        return $registrar->getCacheStore()
131
            ->tags($this->getCacheTags($permission))
132
            ->remember(
133
                $this->getPermissionCacheKey($permission),
134
                $registrar::$cacheExpirationTime,
135
                function () use ($permission, $guardName) {
136
                    return $this->hasUncachedPermissionTo($permission, $guardName);
137
                }
138
            );
139
    }
140
141
    /**
142
     * Check the uncached permissions for the model.
143
     *
144
     * @param string|int|Permission $permission
145
     * @param string|null $guardName
146
     *
147
     * @return bool
148
     *
149
     * @throws PermissionDoesNotExist
150
     */
151
    public function hasUncachedPermissionTo($permission, $guardName = null): bool
152
    {
153
        $permissionClass = $this->getPermissionClass();
154
155
        if (is_string($permission)) {
156
            $permission = $permissionClass->findByName(
157
                $permission,
158
                $guardName ?? $this->getDefaultGuardName()
159
            );
160
        }
161
162
        if (is_int($permission)) {
163
            $permission = $permissionClass->findById(
164
                $permission,
165
                $guardName ?? $this->getDefaultGuardName()
166
            );
167
        }
168
169
        if (! $permission instanceof Permission) {
170
            throw new PermissionDoesNotExist;
171
        }
172
173
        return $this->hasDirectPermission($permission) || $this->hasPermissionViaRole($permission);
174
    }
175
176
    /**
177
     * An alias to hasPermissionTo(), but avoids throwing an exception.
178
     *
179
     * @param string|int|\Spatie\Permission\Contracts\Permission $permission
180
     * @param string|null $guardName
181
     *
182
     * @return bool
183
     */
184
    public function checkPermissionTo($permission, $guardName = null): bool
185
    {
186
        try {
187
            return $this->hasPermissionTo($permission, $guardName);
188
        } catch (PermissionDoesNotExist $e) {
189
            return false;
190
        }
191
    }
192
193
    /**
194
     * Construct the key for the cache entry.
195
     *
196
     * @param null|string|int|\Spatie\Permission\Contracts\Permission $permission
197
     *
198
     * @return string
199
     */
200
    protected function getPermissionCacheKey($permission = null)
201
    {
202
        $key = PermissionRegistrar::$cacheKey.'.'.$this->getClassCacheString();
203
204
        if ($permission !== null) {
205
            $key .= $this->getPermissionCacheString($permission);
206
        }
207
208
        return $key;
209
    }
210
211
    /**
212
     * Construct the tags for the cache entry.
213
     *
214
     * @param null|string|int|\Spatie\Permission\Contracts\Permission $permission
215
     *
216
     * @return array
217
     */
218
    protected function getCacheTags($permission = null)
219
    {
220
        $tags = [
221
            PermissionRegistrar::$cacheKey,
222
            $this->getClassCacheString(),
223
        ];
224
225
        if ($permission !== null) {
226
            $tags[] = $this->getPermissionCacheString($permission);
227
        }
228
229
        return $tags;
230
    }
231
232
    /**
233
     * Get the key to cache the model by.
234
     *
235
     * @return string
236
     */
237
    private function getClassCacheString()
238
    {
239
        return str_replace('\\', '.', get_class($this)).'.'.$this->getKey();
0 ignored issues
show
Bug introduced by
It seems like getKey() must be provided by classes using this trait. How about adding it as abstract method to this trait?

This check looks for methods that are used by a trait but not required by it.

To illustrate, let’s look at the following code example

trait Idable {
    public function equalIds(Idable $other) {
        return $this->getId() === $other->getId();
    }
}

The trait Idable provides a method equalsId that in turn relies on the method getId(). If this method does not exist on a class mixing in this trait, the method will fail.

Adding the getId() as an abstract method to the trait will make sure it is available.

Loading history...
240
    }
241
242
    /**
243
     * Get the key to cache the permission by.
244
     *
245
     * @param string|int|\Spatie\Permission\Contracts\Permission $permission
246
     *
247
     * @return mixed
248
     */
249
    protected function getPermissionCacheString($permission)
250
    {
251
        if ($permission instanceof Permission) {
252
            $permission = $permission[PermissionRegistrar::$cacheModelKey];
253
        }
254
255
        return str_replace('\\', '.', Permission::class).'.'.$permission;
256
    }
257
258
    /**
259
     * Determine if the model has any of the given permissions.
260
     *
261
     * @param array ...$permissions
262
     *
263
     * @return bool
264
     * @throws \Exception
265
     */
266 View Code Duplication
    public function hasAnyPermission(...$permissions): bool
0 ignored issues
show
Duplication introduced by
This method seems to be duplicated in your project.

Duplicated code is one of the most pungent code smells. If you need to duplicate the same code in three or more different places, we strongly encourage you to look into extracting the code into a single class or operation.

You can also find more detailed suggestions in the “Code” section of your repository.

Loading history...
267
    {
268
        if (is_array($permissions[0])) {
269
            $permissions = $permissions[0];
270
        }
271
272
        foreach ($permissions as $permission) {
273
            if ($this->checkPermissionTo($permission)) {
274
                return true;
275
            }
276
        }
277
278
        return false;
279
    }
280
281
    /**
282
     * Determine if the model has all of the given permissions.
283
     *
284
     * @param array ...$permissions
285
     *
286
     * @return bool
287
     * @throws \Exception
288
     */
289 View Code Duplication
    public function hasAllPermissions(...$permissions): bool
0 ignored issues
show
Duplication introduced by
This method seems to be duplicated in your project.

Duplicated code is one of the most pungent code smells. If you need to duplicate the same code in three or more different places, we strongly encourage you to look into extracting the code into a single class or operation.

You can also find more detailed suggestions in the “Code” section of your repository.

Loading history...
290
    {
291
        if (is_array($permissions[0])) {
292
            $permissions = $permissions[0];
293
        }
294
295
        foreach ($permissions as $permission) {
296
            if (! $this->hasPermissionTo($permission)) {
297
                return false;
298
            }
299
        }
300
301
        return true;
302
    }
303
304
    /**
305
     * Determine if the model has, via roles, the given permission.
306
     *
307
     * @param \Spatie\Permission\Contracts\Permission $permission
308
     *
309
     * @return bool
310
     */
311
    protected function hasPermissionViaRole(Permission $permission): bool
312
    {
313
        return $this->hasRole($permission->roles);
0 ignored issues
show
Bug introduced by
Accessing roles on the interface Spatie\Permission\Contracts\Permission suggest that you code against a concrete implementation. How about adding an instanceof check?

If you access a property on an interface, you most likely code against a concrete implementation of the interface.

Available Fixes

  1. Adding an additional type check:

    interface SomeInterface { }
    class SomeClass implements SomeInterface {
        public $a;
    }
    
    function someFunction(SomeInterface $object) {
        if ($object instanceof SomeClass) {
            $a = $object->a;
        }
    }
    
  2. Changing the type hint:

    interface SomeInterface { }
    class SomeClass implements SomeInterface {
        public $a;
    }
    
    function someFunction(SomeClass $object) {
        $a = $object->a;
    }
    
Loading history...
Bug introduced by
It seems like hasRole() must be provided by classes using this trait. How about adding it as abstract method to this trait?

This check looks for methods that are used by a trait but not required by it.

To illustrate, let’s look at the following code example

trait Idable {
    public function equalIds(Idable $other) {
        return $this->getId() === $other->getId();
    }
}

The trait Idable provides a method equalsId that in turn relies on the method getId(). If this method does not exist on a class mixing in this trait, the method will fail.

Adding the getId() as an abstract method to the trait will make sure it is available.

Loading history...
314
    }
315
316
    /**
317
     * Determine if the model has the given permission.
318
     *
319
     * @param string|int|\Spatie\Permission\Contracts\Permission $permission
320
     *
321
     * @return bool
322
     */
323
    public function hasDirectPermission($permission): bool
324
    {
325
        $permissionClass = $this->getPermissionClass();
326
327
        if (is_string($permission)) {
328
            $permission = $permissionClass->findByName($permission, $this->getDefaultGuardName());
329
            if (! $permission) {
330
                return false;
331
            }
332
        }
333
334
        if (is_int($permission)) {
335
            $permission = $permissionClass->findById($permission, $this->getDefaultGuardName());
336
            if (! $permission) {
337
                return false;
338
            }
339
        }
340
341
        if (! $permission instanceof Permission) {
342
            return false;
343
        }
344
345
        return $this->permissions->contains('id', $permission->id);
0 ignored issues
show
Bug introduced by
The property permissions does not exist. Did you maybe forget to declare it?

In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code:

class MyClass { }

$x = new MyClass();
$x->foo = true;

Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion:

class MyClass {
    public $foo;
}

$x = new MyClass();
$x->foo = true;
Loading history...
Bug introduced by
Accessing id on the interface Spatie\Permission\Contracts\Permission suggest that you code against a concrete implementation. How about adding an instanceof check?

If you access a property on an interface, you most likely code against a concrete implementation of the interface.

Available Fixes

  1. Adding an additional type check:

    interface SomeInterface { }
    class SomeClass implements SomeInterface {
        public $a;
    }
    
    function someFunction(SomeInterface $object) {
        if ($object instanceof SomeClass) {
            $a = $object->a;
        }
    }
    
  2. Changing the type hint:

    interface SomeInterface { }
    class SomeClass implements SomeInterface {
        public $a;
    }
    
    function someFunction(SomeClass $object) {
        $a = $object->a;
    }
    
Loading history...
346
    }
347
348
    /**
349
     * Return all the permissions the model has via roles.
350
     */
351
    public function getPermissionsViaRoles(): Collection
352
    {
353
        return $this->load('roles', 'roles.permissions')
0 ignored issues
show
Bug introduced by
It seems like load() must be provided by classes using this trait. How about adding it as abstract method to this trait?

This check looks for methods that are used by a trait but not required by it.

To illustrate, let’s look at the following code example

trait Idable {
    public function equalIds(Idable $other) {
        return $this->getId() === $other->getId();
    }
}

The trait Idable provides a method equalsId that in turn relies on the method getId(). If this method does not exist on a class mixing in this trait, the method will fail.

Adding the getId() as an abstract method to the trait will make sure it is available.

Loading history...
354
            ->roles->flatMap(function ($role) {
355
                return $role->permissions;
356
            })->sort()->values();
357
    }
358
359
    /**
360
     * Return all the permissions the model has, both directly and via roles.
361
     *
362
     * @throws \Exception
363
     */
364
    public function getAllPermissions(): Collection
365
    {
366
        $functionGetAllPermissions = function () {
367
            $permissions = $this->permissions;
368
369
            if ($this->roles) {
0 ignored issues
show
Bug introduced by
The property roles does not exist. Did you maybe forget to declare it?

In PHP it is possible to write to properties without declaring them. For example, the following is perfectly valid PHP code:

class MyClass { }

$x = new MyClass();
$x->foo = true;

Generally, it is a good practice to explictly declare properties to avoid accidental typos and provide IDE auto-completion:

class MyClass {
    public $foo;
}

$x = new MyClass();
$x->foo = true;
Loading history...
370
                $permissions = $permissions->merge($this->getPermissionsViaRoles());
371
            }
372
373
            return $permissions->sort()->values();
374
        };
375
376
        $registrar = app(PermissionRegistrar::class);
377
        if ($registrar::$cacheIsTaggable) {
378
            return $registrar->getCacheStore()
379
                ->tags($this->getCacheTags())
380
                ->remember(
381
                    $this->getPermissionCacheKey(),
382
                    $registrar::$cacheExpirationTime,
383
                    $functionGetAllPermissions
384
                );
385
        }
386
387
        return $functionGetAllPermissions();
388
    }
389
390
    /**
391
     * Grant the given permission(s) to a role.
392
     *
393
     * @param string|array|\Spatie\Permission\Contracts\Permission|\Illuminate\Support\Collection $permissions
394
     *
395
     * @return $this
396
     */
397 View Code Duplication
    public function givePermissionTo(...$permissions)
0 ignored issues
show
Duplication introduced by
This method seems to be duplicated in your project.

Duplicated code is one of the most pungent code smells. If you need to duplicate the same code in three or more different places, we strongly encourage you to look into extracting the code into a single class or operation.

You can also find more detailed suggestions in the “Code” section of your repository.

Loading history...
398
    {
399
        $permissions = collect($permissions)
400
            ->flatten()
401
            ->map(function ($permission) {
402
                return $this->getStoredPermission($permission);
403
            })
404
            ->filter(function ($permission) {
405
                return $permission instanceof Permission;
406
            })
407
            ->each(function ($permission) {
408
                $this->ensureModelSharesGuard($permission);
409
            })
410
            ->map->id
411
            ->all();
412
413
        $model = $this->getModel();
0 ignored issues
show
Bug introduced by
It seems like getModel() must be provided by classes using this trait. How about adding it as abstract method to this trait?

This check looks for methods that are used by a trait but not required by it.

To illustrate, let’s look at the following code example

trait Idable {
    public function equalIds(Idable $other) {
        return $this->getId() === $other->getId();
    }
}

The trait Idable provides a method equalsId that in turn relies on the method getId(). If this method does not exist on a class mixing in this trait, the method will fail.

Adding the getId() as an abstract method to the trait will make sure it is available.

Loading history...
414
415
        if ($model->exists) {
416
            $this->permissions()->sync($permissions, false);
417
            $model->load('permissions');
418
        } else {
419
            $class = \get_class($model);
420
421
            $class::saved(
422
                function ($object) use ($permissions, $model) {
423
                    static $modelLastFiredOn;
424
                    if ($modelLastFiredOn !== null && $modelLastFiredOn === $model) {
425
                        return;
426
                    }
427
                    $object->permissions()->sync($permissions, false);
428
                    $object->load('permissions');
429
                    $modelLastFiredOn = $object;
430
                }
431
            );
432
        }
433
434
        $this->forgetCachedPermissions();
435
436
        return $this;
437
    }
438
439
    /**
440
     * Remove all current permissions and set the given ones.
441
     *
442
     * @param string|array|\Spatie\Permission\Contracts\Permission|\Illuminate\Support\Collection $permissions
443
     *
444
     * @return $this
445
     */
446
    public function syncPermissions(...$permissions)
447
    {
448
        $this->permissions()->detach();
449
450
        return $this->givePermissionTo($permissions);
451
    }
452
453
    /**
454
     * Revoke the given permission.
455
     *
456
     * @param \Spatie\Permission\Contracts\Permission|\Spatie\Permission\Contracts\Permission[]|string|string[] $permission
457
     *
458
     * @return $this
459
     */
460
    public function revokePermissionTo($permission)
461
    {
462
        $this->permissions()->detach($this->getStoredPermission($permission));
463
464
        $this->forgetCachedPermissions();
465
466
        $this->load('permissions');
0 ignored issues
show
Bug introduced by
It seems like load() must be provided by classes using this trait. How about adding it as abstract method to this trait?

This check looks for methods that are used by a trait but not required by it.

To illustrate, let’s look at the following code example

trait Idable {
    public function equalIds(Idable $other) {
        return $this->getId() === $other->getId();
    }
}

The trait Idable provides a method equalsId that in turn relies on the method getId(). If this method does not exist on a class mixing in this trait, the method will fail.

Adding the getId() as an abstract method to the trait will make sure it is available.

Loading history...
467
468
        return $this;
469
    }
470
471
    public function getPermissionNames(): Collection
472
    {
473
        return $this->permissions->pluck('name');
474
    }
475
476
    /**
477
     * @param string|array|\Spatie\Permission\Contracts\Permission|\Illuminate\Support\Collection $permissions
478
     *
479
     * @return \Spatie\Permission\Contracts\Permission|\Spatie\Permission\Contracts\Permission[]|\Illuminate\Support\Collection
480
     */
481
    protected function getStoredPermission($permissions)
482
    {
483
        $permissionClass = $this->getPermissionClass();
484
485
        if (is_numeric($permissions)) {
486
            return $permissionClass->findById($permissions, $this->getDefaultGuardName());
487
        }
488
489
        if (is_string($permissions)) {
490
            return $permissionClass->findByName($permissions, $this->getDefaultGuardName());
491
        }
492
493
        if (is_array($permissions)) {
494
            return $permissionClass
495
                ->whereIn('name', $permissions)
496
                ->whereIn('guard_name', $this->getGuardNames())
497
                ->get();
498
        }
499
500
        return $permissions;
501
    }
502
503
    /**
504
     * @param \Spatie\Permission\Contracts\Permission|\Spatie\Permission\Contracts\Role $roleOrPermission
505
     *
506
     * @throws \Spatie\Permission\Exceptions\GuardDoesNotMatch
507
     */
508
    protected function ensureModelSharesGuard($roleOrPermission)
509
    {
510
        if (! $this->getGuardNames()->contains($roleOrPermission->guard_name)) {
511
            throw GuardDoesNotMatch::create($roleOrPermission->guard_name, $this->getGuardNames());
512
        }
513
    }
514
515
    protected function getGuardNames(): Collection
516
    {
517
        return Guard::getNames($this);
518
    }
519
520
    protected function getDefaultGuardName(): string
521
    {
522
        return Guard::getDefaultName($this);
523
    }
524
525
    /**
526
     * Forget the cached permissions.
527
     */
528
    public function forgetCachedPermissions()
529
    {
530
        app(PermissionRegistrar::class)->forgetCachedPermissions();
531
    }
532
}
533