Laravel 13 + Filament 5 admin panel and REST API for a non-profit developer collective, backed by the Pireon OAuth identity server. The public site is a separate, server-rendered application consuming /api/public/v1. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
34 lines
739 B
PHP
34 lines
739 B
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Policies;
|
|
|
|
use App\Models\User;
|
|
|
|
class MediaPolicy extends ResourcePolicy
|
|
{
|
|
protected function resource(): string
|
|
{
|
|
return 'media';
|
|
}
|
|
|
|
/**
|
|
* Files arrive by being uploaded on a record, not by being created here.
|
|
*/
|
|
public function create(User $user): bool
|
|
{
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* A file something still points at cannot be deleted from here: doing so
|
|
* would leave a broken image on the public site, which is precisely what
|
|
* the health check exists to complain about.
|
|
*/
|
|
public function delete(User $user, $model): bool
|
|
{
|
|
return parent::delete($user, $model) && ! $model->isReferenced();
|
|
}
|
|
}
|