Enea\Authorization\Drivers\Database\PermissionEvaluator

Complexity

Total Complexity

7

Size/Duplication

Total Lines	27
Duplicated Lines	0 %

Test Coverage

Coverage

83.33%

Importance

Changes

0

3 Methods

Rating	Name	Duplication	Size	Complexity
A	evaluate()	0	7	3
A	allWereDenied()	0	7	2
A	existsInRoles()	0	7	2

<?php

declare(strict_types=1);

/**
 * Created on 07/03/18 by enea dhack.
 */

namespace Enea\Authorization\Drivers\Database;

use Enea\Authorization\Contracts\DeniableOwner;
use Enea\Authorization\Contracts\PermissionsOwner;
use Enea\Authorization\Contracts\RolesOwner;

class PermissionEvaluator extends Evaluator
{
    public function evaluate(PermissionsOwner $owner, array $permissions): bool
    {
        if ($this->allWereDenied($owner, $permissions)) {
            return false;
        }

        return $this->existsInRoles($owner, $permissions) || $this->has($owner->permissions()->getQuery())($permissions);
    }

    private function existsInRoles(PermissionsOwner $owner, array $permissions): bool
    {
        if ($owner instanceof RolesOwner) {
            return $owner->roles()->limit(1)->whereHas('permissions', $this->same($permissions))->exists();
        }

        return false;
    }

    private function allWereDenied(PermissionsOwner $owner, array $permissions): bool
    {
        if ($owner instanceof DeniableOwner) {
            return $owner->denied()->whereIn('secret_name', $permissions)->count('permissions.id') === count($permissions);
        }

        return false;
    }
}