mirror of
https://github.com/invoiceninja/invoiceninja.git
synced 2024-11-06 03:02:34 +01:00
4bc92a7aa1
* fix for blank client settings * Force all custom fields to strings * Fixes for bulk actions * Fixes for company POST route.. * Change text from Bitcoin to CRYPTO * Implement default_gateway_type_id in transformer * use scopes for company filtering * Implement validation for portal_domain * Add Google API client * Add activities to company transformer
53 lines
1.0 KiB
PHP
53 lines
1.0 KiB
PHP
<?php
|
|
/**
|
|
* Invoice Ninja (https://invoiceninja.com)
|
|
*
|
|
* @link https://github.com/invoiceninja/invoiceninja source repository
|
|
*
|
|
* @copyright Copyright (c) 2019. Invoice Ninja LLC (https://invoiceninja.com)
|
|
*
|
|
* @license https://opensource.org/licenses/AAL
|
|
*/
|
|
|
|
namespace App\Policies;
|
|
|
|
use App\Models\Client;
|
|
use App\Models\CompanyUser;
|
|
use App\Models\User;
|
|
|
|
/**
|
|
* Class UserPolicy
|
|
* @package App\Policies
|
|
*/
|
|
class UserPolicy extends EntityPolicy
|
|
{
|
|
/**
|
|
* Checks if the user has create permissions
|
|
*
|
|
* @param User $user
|
|
* @return bool
|
|
*/
|
|
public function create(User $user) : bool
|
|
{
|
|
|
|
return $user->isAdmin() || $user->hasPermission('create_user') || $user->hasPermission('create_all');
|
|
|
|
}
|
|
|
|
|
|
/*
|
|
*
|
|
* We need to override as User does not have the company_id property!!!!!
|
|
*
|
|
* We use the CompanyUser table as a proxy
|
|
*/
|
|
public function edit(User $user, $user_entity) : bool
|
|
{
|
|
$company_user = CompanyUser::whereUserId($user_entity->id)->company()->first();
|
|
|
|
return ($user->isAdmin() && $company_user);
|
|
|
|
}
|
|
|
|
}
|