phuongtc
887765bbd7
- Departments + cross-department transfer workflow - Role-based closing (staff→resolved, manager→closed) with proof_of_resolution - Private file storage with collection system + temporary signed URLs - Dashboard: resolved tickets table, stats, handler performance bar chart - Spatie RBAC (admin/manager/staff) - Notifications: TicketTransferred, TicketClosed (database + mail) - Pest tests: 8 tests, 21 assertions - Docker production-ready (Dockerfile + compose + entrypoint)
45 lines
952 B
PHP
45 lines
952 B
PHP
<?php
|
|
|
|
namespace App\Policies;
|
|
|
|
use App\Models\Product;
|
|
use App\Models\User;
|
|
|
|
class ProductPolicy
|
|
{
|
|
public function viewAny(User $user): bool
|
|
{
|
|
return $user->hasRole(['admin', 'manager', 'staff']);
|
|
}
|
|
|
|
public function view(User $user, Product $product): bool
|
|
{
|
|
return $user->hasRole(['admin', 'manager', 'staff']);
|
|
}
|
|
|
|
public function create(User $user): bool
|
|
{
|
|
return $user->hasRole(['admin', 'manager']);
|
|
}
|
|
|
|
public function update(User $user, Product $product): bool
|
|
{
|
|
return $user->hasRole(['admin', 'manager']);
|
|
}
|
|
|
|
public function delete(User $user, Product $product): bool
|
|
{
|
|
return $user->hasRole('admin');
|
|
}
|
|
|
|
public function restore(User $user, Product $product): bool
|
|
{
|
|
return $user->hasRole('admin');
|
|
}
|
|
|
|
public function forceDelete(User $user, Product $product): bool
|
|
{
|
|
return $user->hasRole('admin');
|
|
}
|
|
}
|