Josep Piguillem
3897113313
Laravel 13 + Filament 5 admin panel and REST API for a non-profit developer collective, backed by the Pireon OAuth identity server. The public site is a separate, server-rendered application consuming /api/public/v1. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
42 lines
1.0 KiB
PHP
42 lines
1.0 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Policies;
|
|
|
|
use App\Models\MissingUrl;
|
|
use App\Models\User;
|
|
|
|
/**
|
|
* Gated by the redirect permissions rather than a set of its own.
|
|
*
|
|
* Reading this list and writing redirects are the same job — the list exists
|
|
* only to decide which addresses deserve a rule — and a permission nobody
|
|
* remembers to grant is a screen nobody can open. Whoever may fix a broken
|
|
* link may see which links are broken.
|
|
*/
|
|
class MissingUrlPolicy extends ResourcePolicy
|
|
{
|
|
protected function resource(): string
|
|
{
|
|
return 'redirects';
|
|
}
|
|
|
|
/**
|
|
* Nobody files one of these by hand: they arrive from the frontend.
|
|
*/
|
|
public function create(User $user): bool
|
|
{
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* Turning a report into a redirect is creating a redirect, so it asks for
|
|
* the permission that actually describes it.
|
|
*/
|
|
public function redirect(User $user, MissingUrl $missingUrl): bool
|
|
{
|
|
return $user->can('redirects.create');
|
|
}
|
|
}
|