Spatie\Permission\Traits\HasPermissions

Complexity

Total Complexity

65

Size/Duplication

Total Lines	505
Duplicated Lines	12.48 %

Coupling/Cohesion

Components	1
Dependencies	7

Importance

Changes

0

26 Methods

Rating	Name	Duplication	Size	Complexity
A	bootHasPermissions()	0	10	3
A	getPermissionClass()	0	8	2
A	permissions()	0	10	1
A	scopePermission()	0	27	4
A	convertToPermissionModels()	0	16	3
A	hasPermissionTo()	0	17	5
A	checkHasPermissionTo()	0	24	5
A	checkPermissionTo()	0	8	2
A	getCacheKey()	0	10	2
A	getCacheTags()	0	13	2
A	getClassCacheString()	0	4	1
A	getPermissionCacheString()	0	8	2
A	hasAnyPermission()	14	14	4
A	hasAllPermissions()	14	14	4
A	hasPermissionViaRole()	0	4	1
B	hasDirectPermission()	0	24	6
A	getPermissionsViaRoles()	0	7	1
A	getAllPermissions()	0	25	4
A	givePermissionTo()	35	35	2
A	syncPermissions()	0	6	1
A	revokePermissionTo()	0	10	1
A	getStoredPermission()	0	21	4
A	ensureModelSharesGuard()	0	6	2
A	getGuardNames()	0	4	1
A	getDefaultGuardName()	0	4	1
A	forgetCachedPermissions()	0	4	1

<?php

namespace Spatie\Permission\Traits;

use Illuminate\Database\Eloquent\Builder;
use Illuminate\Database\Eloquent\Relations\MorphToMany;
use Illuminate\Support\Collection;
use Spatie\Permission\Contracts\Permission;
use Spatie\Permission\Exceptions\GuardDoesNotMatch;
use Spatie\Permission\Exceptions\PermissionDoesNotExist;
use Spatie\Permission\Guard;
use Spatie\Permission\PermissionRegistrar;

trait HasPermissions
{
    private $permissionClass;

    public static function bootHasPermissions()
    {
        static::deleting(function ($model) {
            if (method_exists($model, 'isForceDeleting') && !$model->isForceDeleting()) {
                return;
            }

            $model->permissions()->detach();
        });
    }

    public function getPermissionClass()
    {
        if (!isset($this->permissionClass)) {
            $this->permissionClass = app(PermissionRegistrar::class)->getPermissionClass();
        }

        return $this->permissionClass;
    }

    /**
     * A model may have multiple direct permissions.
     */
    public function permissions(): MorphToMany
    {
        return $this->morphToMany(

It seems like morphToMany() must be provided by classes using this trait. How about adding it as abstract method to this trait?

            config('permission.models.permission'),
            'model',
            config('permission.table_names.model_has_permissions'),
            config('permission.column_names.model_morph_key'),
            'permission_id'
        );
    }

    /**
     * Scope the model query to certain permissions only.
     *
     * @param \Illuminate\Database\Eloquent\Builder                                               $query
     * @param string|array|\Spatie\Permission\Contracts\Permission|\Illuminate\Support\Collection $permissions
     *
     * @return \Illuminate\Database\Eloquent\Builder
     */
    public function scopePermission(Builder $query, $permissions): Builder
    {
        $permissions = $this->convertToPermissionModels($permissions);

        $rolesWithPermissions = array_unique(array_reduce($permissions, function ($result, $permission) {
            return array_merge($result, $permission->roles->all());
        }, []));

        return $query->where(function ($query) use ($permissions, $rolesWithPermissions) {
            $query->whereHas('permissions', function ($query) use ($permissions) {
                $query->where(function ($query) use ($permissions) {
                    foreach ($permissions as $permission) {
                        $query->orWhere(config('permission.table_names.permissions') . '.id', $permission->id);
                    }
                });
            });
            if (count($rolesWithPermissions) > 0) {
                $query->orWhereHas('roles', function ($query) use ($rolesWithPermissions) {
                    $query->where(function ($query) use ($rolesWithPermissions) {
                        foreach ($rolesWithPermissions as $role) {
                            $query->orWhere(config('permission.table_names.roles') . '.id', $role->id);
                        }
                    });
                });
            }
        });
    }

    /**
     * @param string|array|\Spatie\Permission\Contracts\Permission|\Illuminate\Support\Collection $permissions
     *
     * @return array
     */
    protected function convertToPermissionModels($permissions): array
    {
        if ($permissions instanceof Collection) {
            $permissions = $permissions->all();
        }

        $permissions = array_wrap($permissions);

        return array_map(function ($permission) {
            if ($permission instanceof Permission) {
                return $permission;
            }

            return $this->getPermissionClass()->findByName($permission, $this->getDefaultGuardName());
        }, $permissions);
    }

    /**
     * Determine if the model may perform the given permission.
     *
     * @param string|int|\Spatie\Permission\Contracts\Permission $permission
     * @param string|null                                        $guardName
     *
     * @return bool
     * @throws \Exception
     */
    public function hasPermissionTo($permission, $guardName = null): bool
    {
        $config = config('permission');

        if (PermissionRegistrar::$cacheIsTaggable &&
            (is_string($permission) || is_int($permission) || $permission instanceof $config['models']['permission'])
        ) {
            return cache()
                ->tags($this->getCacheTags($config, $permission))
                ->remember($this->getCacheKey($config, $permission), $config['cache']['expiration_time'],
                    function () use ($permission, $guardName) {
                        return $this->checkHasPermissionTo($permission, $guardName);

It seems like $guardName defined by parameter $guardName on line 119 can also be of type string; however, Spatie\Permission\Traits\HasPermissions::checkHasPermissionTo() does only seem to accept null, maybe add an additional type check?

                    });
        }

        return $this->checkHasPermissionTo($permission, $guardName);

It seems like $guardName defined by parameter $guardName on line 119 can also be of type string; however, Spatie\Permission\Traits\HasPermissions::checkHasPermissionTo() does only seem to accept null, maybe add an additional type check?

    }

    /**
     * Check the uncached permissions for the model.
     *
     * @param      $permission
     * @param null $guardName
     *
     * @return bool
     */
    public function checkHasPermissionTo($permission, $guardName = null)
    {
        $permissionClass = $this->getPermissionClass();

        if (is_string($permission)) {
            $permission = $permissionClass->findByName(
                $permission,
                $guardName ?? $this->getDefaultGuardName()
            );
        }

        if (is_int($permission)) {
            $permission = $permissionClass->findById(
                $permission,
                $guardName ?? $this->getDefaultGuardName()
            );
        }

        if (!$permission instanceof Permission) {
            throw new PermissionDoesNotExist;
        }

        return $this->hasDirectPermission($permission) || $this->hasPermissionViaRole($permission);
    }

    /**
     * An alias to hasPermissionTo(), but avoids throwing an exception.
     *
     * @param string|int|\Spatie\Permission\Contracts\Permission $permission
     * @param string|null                                        $guardName
     *
     * @return bool
     *
     * @throws \Exception
     */
    public function checkPermissionTo($permission, $guardName = null): bool
    {
        try {
            return $this->hasPermissionTo($permission, $guardName);
        } catch (PermissionDoesNotExist $e) {
            return false;
        }
    }

    /**
     * Construct the key for the cache entry.
     *
     * @param array                                                   $config
     * @param null|string|int|\Spatie\Permission\Contracts\Permission $permission
     *
     * @return string
     */
    protected function getCacheKey(array $config, $permission = null)
    {
        $key = $config['cache']['key'] . '.' . $this->getClassCacheString();

        if ($permission !== null) {
            $key .= $this->getPermissionCacheString($config, $permission);
        }

        return $key;
    }

    /**
     * Construct the tags for the cache entry.
     *
     * @param array                                                   $config
     * @param null|string|int|\Spatie\Permission\Contracts\Permission $permission
     *
     * @return array
     */
    protected function getCacheTags(array $config, $permission = null)
    {
        $tags = [
            $config['cache']['key'],
            $this->getClassCacheString(),
        ];

        if ($permission !== null) {
            $tags[] = $this->getPermissionCacheString($config, $permission);
        }

        return $tags;
    }

    /**
     * Get the configured key to cache the model by.
     *
     * @return string
     */
    protected function getClassCacheString()
    {
        return str_replace('\\', '.', get_class($this)) . '.' . $this->getKey();

It seems like getKey() must be provided by classes using this trait. How about adding it as abstract method to this trait?

    }

    /**
     * Get the configured key to cache the permission by.
     *
     * @param array                                              $config
     * @param string|int|\Spatie\Permission\Contracts\Permission $permission
     *
     * @return mixed
     */
    protected function getPermissionCacheString(array $config, $permission)
    {
        if ($permission instanceof $config['models']['permission']) {
            $permission = $permission[$config['cache']['default_model_attribute']];
        }

        return str_replace('\\', '.', $config['models']['permission']) . '.' . $permission;
    }

    /**
     * Determine if the model has any of the given permissions.
     *
     * @param array ...$permissions
     *
     * @return bool
     * @throws \Exception
     */
    public function hasAnyPermission(...$permissions): bool

This method seems to be duplicated in your project.

    {
        if (is_array($permissions[0])) {
            $permissions = $permissions[0];
        }

        foreach ($permissions as $permission) {
            if ($this->checkPermissionTo($permission)) {
                return true;
            }
        }

        return false;
    }

    /**
     * Determine if the model has all of the given permissions.
     *
     * @param array ...$permissions
     *
     * @return bool
     * @throws \Exception
     */
    public function hasAllPermissions(...$permissions): bool

This method seems to be duplicated in your project.

    {
        if (is_array($permissions[0])) {
            $permissions = $permissions[0];
        }

        foreach ($permissions as $permission) {
            if (!$this->hasPermissionTo($permission)) {
                return false;
            }
        }

        return true;
    }

    /**
     * Determine if the model has, via roles, the given permission.
     *
     * @param \Spatie\Permission\Contracts\Permission $permission
     *
     * @return bool
     */
    protected function hasPermissionViaRole(Permission $permission): bool
    {
        return $this->hasRole($permission->roles);

Accessing roles on the interface Spatie\Permission\Contracts\Permission suggest that you code against a concrete implementation. How about adding an instanceof check?

It seems like hasRole() must be provided by classes using this trait. How about adding it as abstract method to this trait?

    }

    /**
     * Determine if the model has the given permission.
     *
     * @param string|int|\Spatie\Permission\Contracts\Permission $permission
     *
     * @return bool
     */
    public function hasDirectPermission($permission): bool
    {
        $permissionClass = $this->getPermissionClass();

        if (is_string($permission)) {
            $permission = $permissionClass->findByName($permission, $this->getDefaultGuardName());
            if (!$permission) {
                return false;
            }
        }

        if (is_int($permission)) {
            $permission = $permissionClass->findById($permission, $this->getDefaultGuardName());
            if (!$permission) {
                return false;
            }
        }

        if (!$permission instanceof Permission) {
            return false;
        }

        return $this->permissions->contains('id', $permission->id);

The property permissions does not exist. Did you maybe forget to declare it?

Accessing id on the interface Spatie\Permission\Contracts\Permission suggest that you code against a concrete implementation. How about adding an instanceof check?

    }

    /**
     * Return all the permissions the model has via roles.
     */
    public function getPermissionsViaRoles(): Collection
    {
        return $this->load('roles', 'roles.permissions')

It seems like load() must be provided by classes using this trait. How about adding it as abstract method to this trait?

            ->roles->flatMap(function ($role) {
                return $role->permissions;
            })->sort()->values();
    }

    /**
     * Return all the permissions the model has, both directly and via roles.
     */
    public function getAllPermissions(): Collection
    {
        if (PermissionRegistrar::$cacheIsTaggable) {
            $config = config('permission');

            return cache()->tags($this->getCacheTags($config))
                ->remember($this->getCacheKey($config), $config['cache']['expiration_time'], function () {
                    $permissions = $this->permissions;

                    if ($this->roles) {

The property roles does not exist. Did you maybe forget to declare it?

                        $permissions = $permissions->merge($this->getPermissionsViaRoles());
                    }

                    return $permissions->sort()->values();
                });
        }

        $permissions = $this->permissions;

        if ($this->roles) {
            $permissions = $permissions->merge($this->getPermissionsViaRoles());
        }

        return $permissions->sort()->values();
    }

    /**
     * Grant the given permission(s) to a role.
     *
     * @param string|array|\Spatie\Permission\Contracts\Permission|\Illuminate\Support\Collection $permissions
     *
     * @return $this
     */
    public function givePermissionTo(...$permissions)

This method seems to be duplicated in your project.

    {
        $permissions = collect($permissions)
            ->flatten()
            ->map(function ($permission) {
                return $this->getStoredPermission($permission);
            })
            ->filter(function ($permission) {
                return $permission instanceof Permission;
            })
            ->each(function ($permission) {
                $this->ensureModelSharesGuard($permission);
            })
            ->map->id
            ->all();

        $model = $this->getModel();

It seems like getModel() must be provided by classes using this trait. How about adding it as abstract method to this trait?

        if ($model->exists) {
            $this->permissions()->sync($permissions, false);
            $model->load('permissions');
        } else {
            $class = \get_class($model);

            $class::saved(
                function ($model) use ($permissions) {
                    $model->permissions()->sync($permissions, false);
                    $model->load('permissions');
                });
        }

        $this->forgetCachedPermissions();

        return $this;
    }

    /**
     * Remove all current permissions and set the given ones.
     *
     * @param string|array|\Spatie\Permission\Contracts\Permission|\Illuminate\Support\Collection $permissions
     *
     * @return $this
     */
    public function syncPermissions(...$permissions)
    {
        $this->permissions()->detach();

        return $this->givePermissionTo($permissions);
    }

    /**
     * Revoke the given permission.
     *
     * @param \Spatie\Permission\Contracts\Permission|\Spatie\Permission\Contracts\Permission[]|string|string[] $permission
     *
     * @return $this
     */
    public function revokePermissionTo($permission)
    {
        $this->permissions()->detach($this->getStoredPermission($permission));

        $this->forgetCachedPermissions();

        $this->load('permissions');

It seems like load() must be provided by classes using this trait. How about adding it as abstract method to this trait?

        return $this;
    }

    /**
     * @param string|array|\Spatie\Permission\Contracts\Permission|\Illuminate\Support\Collection $permissions
     *
     * @return \Spatie\Permission\Contracts\Permission|\Spatie\Permission\Contracts\Permission[]|\Illuminate\Support\Collection
     */
    protected function getStoredPermission($permissions)
    {
        $permissionClass = $this->getPermissionClass();

        if (is_numeric($permissions)) {
            return $permissionClass->findById($permissions, $this->getDefaultGuardName());
        }

        if (is_string($permissions)) {
            return $permissionClass->findByName($permissions, $this->getDefaultGuardName());
        }

        if (is_array($permissions)) {
            return $permissionClass
                ->whereIn('name', $permissions)
                ->whereIn('guard_name', $this->getGuardNames())
                ->get();
        }

        return $permissions;
    }

    /**
     * @param \Spatie\Permission\Contracts\Permission|\Spatie\Permission\Contracts\Role $roleOrPermission
     *
     * @throws \Spatie\Permission\Exceptions\GuardDoesNotMatch
     */
    protected function ensureModelSharesGuard($roleOrPermission)
    {
        if (!$this->getGuardNames()->contains($roleOrPermission->guard_name)) {
            throw GuardDoesNotMatch::create($roleOrPermission->guard_name, $this->getGuardNames());
        }
    }

    protected function getGuardNames(): Collection
    {
        return Guard::getNames($this);
    }

    protected function getDefaultGuardName(): string
    {
        return Guard::getDefaultName($this);
    }

    /**
     * Forget the cached permissions.
     */
    public function forgetCachedPermissions()
    {
        app(PermissionRegistrar::class)->forgetCachedPermissions();
    }
}