X-Git-Url: https://git.localhorst.tv/?a=blobdiff_plain;f=app%2FPolicies%2FUserPolicy.php;fp=app%2FPolicies%2FUserPolicy.php;h=67bc561b8c2b2d922f6b40944e43863d2a88b6ce;hb=920f11ddfeb2175e4e1556886773dcd044c6085b;hp=0000000000000000000000000000000000000000;hpb=7016f4b28fa1324269ae9e2a8aad28dd562927d4;p=alttp.git

diff --git a/app/Policies/UserPolicy.php b/app/Policies/UserPolicy.php
new file mode 100644
index 0000000..67bc561
--- /dev/null
+++ b/app/Policies/UserPolicy.php
@@ -0,0 +1,106 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class UserPolicy
+{
+	use HandlesAuthorization;
+
+	/**
+	 * Determine whether the user can view any models.
+	 *
+	 * @param  \App\Models\User  $user
+	 * @return \Illuminate\Auth\Access\Response|bool
+	 */
+	public function viewAny(User $user)
+	{
+		return true;
+	}
+
+	/**
+	 * Determine whether the user can view the model.
+	 *
+	 * @param  \App\Models\User  $user
+	 * @param  \App\Models\User  $model
+	 * @return \Illuminate\Auth\Access\Response|bool
+	 */
+	public function view(User $user, User $model)
+	{
+		return true;
+	}
+
+	/**
+	 * Determine whether the user can create models.
+	 *
+	 * @param  \App\Models\User  $user
+	 * @return \Illuminate\Auth\Access\Response|bool
+	 */
+	public function create(User $user)
+	{
+		return false;
+	}
+
+	/**
+	 * Determine whether the user can update the model.
+	 *
+	 * @param  \App\Models\User  $user
+	 * @param  \App\Models\User  $model
+	 * @return \Illuminate\Auth\Access\Response|bool
+	 */
+	public function update(User $user, User $model)
+	{
+		return $user->id === $model->id;
+	}
+
+	/**
+	 * Determine whether the user can delete the model.
+	 *
+	 * @param  \App\Models\User  $user
+	 * @param  \App\Models\User  $model
+	 * @return \Illuminate\Auth\Access\Response|bool
+	 */
+	public function delete(User $user, User $model)
+	{
+		return false;
+	}
+
+	/**
+	 * Determine whether the user can restore the model.
+	 *
+	 * @param  \App\Models\User  $user
+	 * @param  \App\Models\User  $model
+	 * @return \Illuminate\Auth\Access\Response|bool
+	 */
+	public function restore(User $user, User $model)
+	{
+		return false;
+	}
+
+	/**
+	 * Determine whether the user can permanently delete the model.
+	 *
+	 * @param  \App\Models\User  $user
+	 * @param  \App\Models\User  $model
+	 * @return \Illuminate\Auth\Access\Response|bool
+	 */
+	public function forceDelete(User $user, User $model)
+	{
+		return false;
+	}
+
+	/**
+	 * Determine whether the user change the stream link of the model.
+	 *
+	 * @param  \App\Models\User  $user
+	 * @param  \App\Models\User  $model
+	 * @return \Illuminate\Auth\Access\Response|bool
+	 */
+	public function setStreamLink(User $user, User $model)
+	{
+		return $user->role == 'admin' || $user->id == $model->id;
+	}
+
+}