feaa8b6c93
- Introduced `StoreURLAppForm` and `StoreURLAppData` for form handling and data transformation. - Added `UrlAppService` to streamline URL app creation with settings like `accessUrl` and `isConnectedToMicrosoft`. - Enhanced user access controls with role-based permissions using `UserAccessTypeEnum`. - Updated UI for URL app creation with support for logos and dynamic role selection. - Implemented feature tests to validate URL app creation and access URL formatting.
70 lines
1.8 KiB
PHP
70 lines
1.8 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Models;
|
|
|
|
use Illuminate\Database\Eloquent\Attributes\Fillable;
|
|
use Illuminate\Database\Eloquent\Builder;
|
|
use Illuminate\Database\Eloquent\Relations\BelongsToMany;
|
|
use Spatie\Activitylog\Models\Concerns\LogsActivity;
|
|
use Spatie\Activitylog\Support\LogOptions;
|
|
use Spatie\Permission\Models\{Permission, Role as SpatieRole};
|
|
|
|
/**
|
|
* @property int $priority
|
|
* @property AppRole $pivot
|
|
* @property ConnectedApp $apps
|
|
*
|
|
* @method static Builder<Role> visible()
|
|
*/
|
|
#[Fillable(['name', 'guard_name', 'priority'])]
|
|
class Role extends SpatieRole
|
|
{
|
|
use LogsActivity;
|
|
|
|
public function apps(): BelongsToMany
|
|
{
|
|
return $this->belongsToMany(
|
|
ConnectedApp::class,
|
|
'app_roles',
|
|
'role_id',
|
|
'app_id'
|
|
)
|
|
->using(AppRole::class)
|
|
->withPivot('id', 'duration', 'is_unlimited');
|
|
}
|
|
|
|
public function getActivitylogOptions(): LogOptions
|
|
{
|
|
return LogOptions::defaults()
|
|
->logOnly(['name', 'priority'])
|
|
->logOnlyDirty()
|
|
->useLogName('role_management');
|
|
}
|
|
|
|
/**
|
|
* Override the Spatie permissions relationship to provide precise type-hinting for Larastan.
|
|
*
|
|
* @return BelongsToMany<Permission, Role>
|
|
*/
|
|
public function permissions(): BelongsToMany
|
|
{
|
|
return parent::permissions();
|
|
}
|
|
|
|
/**
|
|
* Scope a query to only include roles with priority strictly greater than the logged in user's priority (lower privilege).
|
|
*/
|
|
public function scopeVisible(Builder $query): Builder
|
|
{
|
|
if (! auth()->check()) {
|
|
return $query;
|
|
}
|
|
|
|
$userPriority = auth()->user()?->roles()->min('priority') ?? 999999;
|
|
|
|
return $query->where('priority', '>', $userPriority);
|
|
}
|
|
}
|