51 lines
1.3 KiB
PHP
51 lines
1.3 KiB
PHP
<?php
|
|
|
|
namespace App\Policies;
|
|
|
|
use App\Models\Ledger;
|
|
use App\Models\Mutation;
|
|
use App\Models\User;
|
|
|
|
class MutationPolicy
|
|
{
|
|
/**
|
|
* Determine whether the user can view the mutation.
|
|
*/
|
|
public function view(User $user, Mutation $mutation): bool
|
|
{
|
|
return $user->can('view', $mutation->ledger);
|
|
}
|
|
|
|
/**
|
|
* Determine whether the user can create mutations.
|
|
*/
|
|
public function create(User $user, Ledger $ledger): bool
|
|
{
|
|
$dynamic = $ledger->dynamic;
|
|
|
|
return $dynamic->participants()->where('user_id', $user->id)->exists();
|
|
}
|
|
|
|
/**
|
|
* Determine whether the user can update the mutation.
|
|
*/
|
|
public function update(User $user, Mutation $mutation): bool
|
|
{
|
|
$dynamic = $mutation->ledger->dynamic;
|
|
$isOwner = $dynamic->participants()->where('user_id', $user->id)->where('role', 'owner')->exists();
|
|
|
|
return $isOwner && $mutation->status === 'pending';
|
|
}
|
|
|
|
/**
|
|
* Determine whether the user can void the mutation.
|
|
*/
|
|
public function void(User $user, Mutation $mutation): bool
|
|
{
|
|
$dynamic = $mutation->ledger->dynamic;
|
|
$isOwner = $dynamic->participants()->where('user_id', $user->id)->where('role', 'owner')->exists();
|
|
|
|
return $isOwner && $mutation->status !== 'voided';
|
|
}
|
|
}
|