82 lines
2.3 KiB
PHP
82 lines
2.3 KiB
PHP
<?php
|
|
|
|
namespace App\Policies;
|
|
|
|
use App\Models\Harvest;
|
|
use App\Models\User;
|
|
|
|
class HarvestPolicy
|
|
{
|
|
/**
|
|
* Determine whether the user can view any harvests.
|
|
*/
|
|
public function viewAny(User $user): bool
|
|
{
|
|
// All authenticated users can view harvests
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Determine whether the user can view the harvest.
|
|
*/
|
|
public function view(User $user, Harvest $harvest): bool
|
|
{
|
|
// All authenticated users can view individual harvests
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Determine whether the user can create harvests.
|
|
*/
|
|
public function create(User $user): bool
|
|
{
|
|
// TODO: Implement role-based authorization
|
|
// Winemakers and workers should be able to record harvests
|
|
// Example: return $user->hasRole(['admin', 'winemaker', 'worker']);
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Determine whether the user can update the harvest.
|
|
*/
|
|
public function update(User $user, Harvest $harvest): bool
|
|
{
|
|
// TODO: Implement role-based authorization
|
|
// Users can update their own harvests, or admins/winemakers can update any
|
|
// Example: return $user->id === $harvest->user_id || $user->hasRole(['admin', 'winemaker']);
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Determine whether the user can delete the harvest.
|
|
*/
|
|
public function delete(User $user, Harvest $harvest): bool
|
|
{
|
|
// TODO: Implement role-based authorization
|
|
// Only administrators and winemakers should be able to delete harvests
|
|
// Example: return $user->hasRole(['admin', 'winemaker']);
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Determine whether the user can restore the harvest.
|
|
*/
|
|
public function restore(User $user, Harvest $harvest): bool
|
|
{
|
|
// TODO: Implement role-based authorization
|
|
// Only administrators should be able to restore harvests
|
|
// Example: return $user->hasRole('admin');
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* Determine whether the user can permanently delete the harvest.
|
|
*/
|
|
public function forceDelete(User $user, Harvest $harvest): bool
|
|
{
|
|
// TODO: Implement role-based authorization
|
|
// Only administrators should be able to force delete harvests
|
|
// Example: return $user->hasRole('admin');
|
|
return true;
|
|
}
|
|
}
|