itm/sispace
itm/sispace
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add ClassSession policy and update ShieldSeeder permissions for all roles

Browse Source
This commit is contained in:
Yoga Pangestu 2026-03-30 10:48:45 +07:00
parent 0b1e3f594c
commit 39cd4ac368
2 changed files with 268 additions and 144 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

69
app/Policies/ClassSessionPolicy.php Normal file
View File

@ -0,0 +1,69 @@
<?php
declare(strict_types=1);
namespace App\Policies;
use App\Models\ClassSession;
use Illuminate\Auth\Access\HandlesAuthorization;
use Illuminate\Foundation\Auth\User as AuthUser;
class ClassSessionPolicy
{
use HandlesAuthorization;
public function viewAny(AuthUser $authUser): bool
{
return $authUser->can('ViewAny:ClassSession');
}
public function view(AuthUser $authUser, ClassSession $classSession): bool
{
return $authUser->can('View:ClassSession');
}
public function create(AuthUser $authUser): bool
{
return $authUser->can('Create:ClassSession');
}
public function update(AuthUser $authUser, ClassSession $classSession): bool
{
return $authUser->can('Update:ClassSession');
}
public function delete(AuthUser $authUser, ClassSession $classSession): bool
{
return $authUser->can('Delete:ClassSession');
}
public function restore(AuthUser $authUser, ClassSession $classSession): bool
{
return $authUser->can('Restore:ClassSession');
}
public function forceDelete(AuthUser $authUser, ClassSession $classSession): bool
{
return $authUser->can('ForceDelete:ClassSession');
}
public function forceDeleteAny(AuthUser $authUser): bool
{
return $authUser->can('ForceDeleteAny:ClassSession');
}
public function restoreAny(AuthUser $authUser): bool
{
return $authUser->can('RestoreAny:ClassSession');
}
public function replicate(AuthUser $authUser, ClassSession $classSession): bool
{
return $authUser->can('Replicate:ClassSession');
}
public function reorder(AuthUser $authUser): bool
{
return $authUser->can('Reorder:ClassSession');
}
}

343
database/seeders/ShieldSeeder.php
View File

@ -22,191 +22,251 @@ public function run(): void
"name": "Developer", "name": "Developer",
"guard_name": "web", "guard_name": "web",
"permissions" : [ "permissions" : [
"ViewAny:Student",
"View:Student",
"Create:Student",
"Update:Student",
"Delete:Student",
"Restore:Student",
"ForceDelete:Student",
"ForceDeleteAny:Student",
"RestoreAny:Student",
"Replicate:Student",
"Reorder:Student",
"ViewAny:Course",
"View:Course",
"Create:Course",
"Update:Course",
"Delete:Course",
"Restore:Course",
"ForceDelete:Course",
"ForceDeleteAny:Course",
"RestoreAny:Course",
"Replicate:Course",
"Reorder:Course",
"ViewAny:CourseSchedule",
"View:CourseSchedule",
"Create:CourseSchedule",
"Update:CourseSchedule",
"Delete:CourseSchedule",
"Restore:CourseSchedule",
"ForceDelete:CourseSchedule",
"ForceDeleteAny:CourseSchedule",
"RestoreAny:CourseSchedule",
"Replicate:CourseSchedule",
"Reorder:CourseSchedule",
"ViewAny:Assignment",
"View:Assignment",
"Create:Assignment", "Create:Assignment",
"Update:Assignment",
"Delete:Assignment", "Delete:Assignment",
"Restore:Assignment",
"ForceDelete:Assignment", "ForceDelete:Assignment",
"ForceDeleteAny:Assignment", "ForceDeleteAny:Assignment",
"RestoreAny:Assignment",
"Replicate:Assignment", "Replicate:Assignment",
"Reorder:Assignment", "Reorder:Assignment",
"Restore:Assignment",
"RestoreAny:Assignment",
"Update:Assignment",
"View:Assignment",
"ViewAny:Assignment",
"ViewAny:Attendance",
"View:Attendance",
"Create:Attendance", "Create:Attendance",
"Update:Attendance",
"Delete:Attendance", "Delete:Attendance",
"Restore:Attendance",
"ForceDelete:Attendance", "ForceDelete:Attendance",
"ForceDeleteAny:Attendance", "ForceDeleteAny:Attendance",
"RestoreAny:Attendance",
"Replicate:Attendance", "Replicate:Attendance",
"Reorder:Attendance", "Reorder:Attendance",
"Restore:Attendance",
"RestoreAny:Attendance",
"Update:Attendance",
"View:Attendance",
"ViewAny:Attendance",
"ViewAny:Material",
"View:Material",
"Create:Material",
"Update:Material",
"Delete:Material",
"Restore:Material",
"ForceDelete:Material",
"ForceDeleteAny:Material",
"RestoreAny:Material",
"Replicate:Material",
"Reorder:Material",
"ViewAny:StudyGroup",
"View:StudyGroup",
"Create:StudyGroup",
"Update:StudyGroup",
"Delete:StudyGroup",
"Restore:StudyGroup",
"ForceDelete:StudyGroup",
"ForceDeleteAny:StudyGroup",
"RestoreAny:StudyGroup",
"Replicate:StudyGroup",
"Reorder:StudyGroup",
"ViewAny:Role",
"View:Role",
"Create:Role",
"Update:Role",
"Delete:Role",
"Restore:Role",
"ForceDelete:Role",
"ForceDeleteAny:Role",
"RestoreAny:Role",
"Replicate:Role",
"Reorder:Role",
"View:LogTable",
"View:ManageSettings",
"ViewAny:AttendanceMonitoring",
"View:AttendanceMonitoring",
"Create:AttendanceMonitoring", "Create:AttendanceMonitoring",
"Update:AttendanceMonitoring",
"Delete:AttendanceMonitoring", "Delete:AttendanceMonitoring",
"Restore:AttendanceMonitoring",
"ForceDelete:AttendanceMonitoring", "ForceDelete:AttendanceMonitoring",
"ForceDeleteAny:AttendanceMonitoring", "ForceDeleteAny:AttendanceMonitoring",
"RestoreAny:AttendanceMonitoring",
"Replicate:AttendanceMonitoring", "Replicate:AttendanceMonitoring",
"Reorder:AttendanceMonitoring" "Reorder:AttendanceMonitoring",
"Restore:AttendanceMonitoring",
"RestoreAny:AttendanceMonitoring",
"Update:AttendanceMonitoring",
"View:AttendanceMonitoring",
"ViewAny:AttendanceMonitoring",
"Create:ClassSession",
"Delete:ClassSession",
"ForceDelete:ClassSession",
"ForceDeleteAny:ClassSession",
"Replicate:ClassSession",
"Reorder:ClassSession",
"Restore:ClassSession",
"RestoreAny:ClassSession",
"Update:ClassSession",
"View:ClassSession",
"ViewAny:ClassSession",
"Create:Course",
"Delete:Course",
"ForceDelete:Course",
"ForceDeleteAny:Course",
"Replicate:Course",
"Reorder:Course",
"Restore:Course",
"RestoreAny:Course",
"Update:Course",
"View:Course",
"ViewAny:Course",
"Create:CourseSchedule",
"Delete:CourseSchedule",
"ForceDelete:CourseSchedule",
"ForceDeleteAny:CourseSchedule",
"Replicate:CourseSchedule",
"Reorder:CourseSchedule",
"Restore:CourseSchedule",
"RestoreAny:CourseSchedule",
"Update:CourseSchedule",
"View:CourseSchedule",
"ViewAny:CourseSchedule",
"View:LogTable",
"View:ManageSettings",
"Create:Material",
"Delete:Material",
"ForceDelete:Material",
"ForceDeleteAny:Material",
"Replicate:Material",
"Reorder:Material",
"Restore:Material",
"RestoreAny:Material",
"Update:Material",
"View:Material",
"ViewAny:Material",
"Create:Role",
"Delete:Role",
"ForceDelete:Role",
"ForceDeleteAny:Role",
"Replicate:Role",
"Reorder:Role",
"Restore:Role",
"RestoreAny:Role",
"Update:Role",
"View:Role",
"ViewAny:Role",
"Create:Student",
"Delete:Student",
"ForceDelete:Student",
"ForceDeleteAny:Student",
"Replicate:Student",
"Reorder:Student",
"Restore:Student",
"RestoreAny:Student",
"Update:Student",
"View:Student",
"ViewAny:Student",
"Create:StudyGroup",
"Delete:StudyGroup",
"ForceDelete:StudyGroup",
"ForceDeleteAny:StudyGroup",
"Replicate:StudyGroup",
"Reorder:StudyGroup",
"Restore:StudyGroup",
"RestoreAny:StudyGroup",
"Update:StudyGroup",
"View:StudyGroup",
"ViewAny:StudyGroup"
] ]
}, },
{ {
"name": "Mahasiswa", "name": "Mahasiswa",
"guard_name": "web", "guard_name": "web",
"permissions" : [ "permissions" : [
"ViewAny:Student",
"View:Student",
"ViewAny:Course",
"View:Course",
"ViewAny:CourseSchedule",
"View:CourseSchedule",
"ViewAny:Assignment",
"View:Assignment", "View:Assignment",
"ViewAny:Assignment",
"ViewAny:Attendance",
"View:Attendance", "View:Attendance",
"ViewAny:Attendance",
"View:Course",
"ViewAny:Course",
"View:CourseSchedule",
"ViewAny:CourseSchedule",
"ViewAny:Material",
"View:Material", "View:Material",
"ViewAny:Material",
"ViewAny:StudyGroup", "View:StudyGroup",
"View:StudyGroup" "ViewAny:StudyGroup"
] ]
}, },
{ {
"name": "Kosma", "name": "Kosma",
"guard_name": "web", "guard_name": "web",
"permissions" : [ "permissions" : [
"Create:Student", "Create:Assignment",
"Update:Student", "Delete:Assignment",
"Delete:Student", "ForceDelete:Assignment",
"ForceDeleteAny:Assignment",
"Restore:Assignment",
"RestoreAny:Assignment",
"Update:Assignment",
"View:Assignment",
"ViewAny:Assignment",
"Create:Attendance",
"Delete:Attendance",
"ForceDelete:Attendance",
"ForceDeleteAny:Attendance",
"Restore:Attendance",
"RestoreAny:Attendance",
"Update:Attendance",
"View:Attendance",
"ViewAny:Attendance",
"Create:AttendanceMonitoring",
"Delete:AttendanceMonitoring",
"ForceDelete:AttendanceMonitoring",
"ForceDeleteAny:AttendanceMonitoring",
"Restore:AttendanceMonitoring",
"RestoreAny:AttendanceMonitoring",
"Update:AttendanceMonitoring",
"View:AttendanceMonitoring",
"ViewAny:AttendanceMonitoring",
"Create:ClassSession",
"Delete:ClassSession",
"ForceDelete:ClassSession",
"ForceDeleteAny:ClassSession",
"Restore:ClassSession",
"RestoreAny:ClassSession",
"Update:ClassSession",
"View:ClassSession",
"ViewAny:ClassSession",
"Create:Course", "Create:Course",
"Update:Course",
"Delete:Course", "Delete:Course",
"ForceDelete:Course",
"ForceDeleteAny:Course",
"Restore:Course",
"RestoreAny:Course",
"Update:Course",
"View:Course",
"ViewAny:Course",
"Create:CourseSchedule", "Create:CourseSchedule",
"Update:CourseSchedule",
"Delete:CourseSchedule", "Delete:CourseSchedule",
"ForceDelete:CourseSchedule",
"Create:Assignment", "ForceDeleteAny:CourseSchedule",
"Update:Assignment", "Restore:CourseSchedule",
"Delete:Assignment", "RestoreAny:CourseSchedule",
"Update:CourseSchedule",
"Create:Material", "View:CourseSchedule",
"Update:Material", "ViewAny:CourseSchedule",
"Delete:Material",
"Create:StudyGroup",
"Update:StudyGroup",
"Delete:StudyGroup",
"View:ManageSettings", "View:ManageSettings",
"ViewAny:AttendanceMonitoring", "Create:Material",
"View:AttendanceMonitoring", "Delete:Material",
"Create:AttendanceMonitoring", "ForceDelete:Material",
"Update:AttendanceMonitoring", "ForceDeleteAny:Material",
"Delete:AttendanceMonitoring", "Restore:Material",
"Restore:AttendanceMonitoring", "RestoreAny:Material",
"ForceDelete:AttendanceMonitoring", "Update:Material",
"ForceDeleteAny:AttendanceMonitoring", "View:Material",
"RestoreAny:AttendanceMonitoring", "ViewAny:Material",
"Replicate:AttendanceMonitoring",
"Reorder:AttendanceMonitoring" "Create:Student",
"Delete:Student",
"ForceDelete:Student",
"ForceDeleteAny:Student",
"Restore:Student",
"RestoreAny:Student",
"Update:Student",
"View:Student",
"ViewAny:Student",
"Create:StudyGroup",
"Delete:StudyGroup",
"ForceDelete:StudyGroup",
"ForceDeleteAny:StudyGroup",
"Restore:StudyGroup",
"RestoreAny:StudyGroup",
"Update:StudyGroup",
"View:StudyGroup",
"ViewAny:StudyGroup"
] ]
} }
] ]
JSON; JSON;
$directPermissions = '[]'; $directPermissions = '[]';
@ -260,11 +320,10 @@ protected static function seedUsers(string $users): void
return; return;
} }
$userModel = 'App\Models\User'; $userModel = 'App\\Models\\User';
$tenancyEnabled = false; $tenancyEnabled = false;
foreach ($userData as $data) { foreach ($userData as $data) {
// Extract role/permission data before creating user
$roles = $data['roles'] ?? []; $roles = $data['roles'] ?? [];
$permissions = $data['permissions'] ?? []; $permissions = $data['permissions'] ?? [];
$tenantRoles = $data['tenant_roles'] ?? []; $tenantRoles = $data['tenant_roles'] ?? [];
@ -276,7 +335,6 @@ protected static function seedUsers(string $users): void
$data $data
); );
// Handle tenancy mode - sync roles/permissions per tenant
if ($tenancyEnabled && (! empty($tenantRoles) || ! empty($tenantPermissions))) { if ($tenancyEnabled && (! empty($tenantRoles) || ! empty($tenantPermissions))) {
foreach ($tenantRoles as $tenantId => $roleNames) { foreach ($tenantRoles as $tenantId => $roleNames) {
$contextId = $tenantId === '_global' ? null : $tenantId; $contextId = $tenantId === '_global' ? null : $tenantId;
@ -290,7 +348,6 @@ protected static function seedUsers(string $users): void
$user->syncPermissions($permissionNames); $user->syncPermissions($permissionNames);
} }
} else { } else {
// Non-tenancy mode
if (! empty($roles)) { if (! empty($roles)) {
$user->syncRoles($roles); $user->syncRoles($roles);
} }
@ -325,7 +382,7 @@ protected static function seedUserTenantPivot(string $pivot): void
$uniqueKeys[$tenantForeignKey] = $row[$tenantForeignKey]; $uniqueKeys[$tenantForeignKey] = $row[$tenantForeignKey];
} }
if (! empty($uniqueKeys)) { if (! empty($makeRolesWithPermissions)) {
DB::table($pivotTable)->updateOrInsert($uniqueKeys, $row); DB::table($pivotTable)->updateOrInsert($uniqueKeys, $row);
} }
} }
@ -348,7 +405,6 @@ protected static function makeRolesWithPermissions(string $rolesWithPermissions)
foreach ($rolePlusPermissions as $rolePlusPermission) { foreach ($rolePlusPermissions as $rolePlusPermission) {
$tenantId = $rolePlusPermission[$teamForeignKey] ?? null; $tenantId = $rolePlusPermission[$teamForeignKey] ?? null;
// Set tenant context for role creation and permission sync
if ($tenancyEnabled) { if ($tenancyEnabled) {
setPermissionsTeamId($tenantId); setPermissionsTeamId($tenantId);
} }
@ -358,7 +414,6 @@ protected static function makeRolesWithPermissions(string $rolesWithPermissions)
'guard_name' => $rolePlusPermission['guard_name'], 'guard_name' => $rolePlusPermission['guard_name'],
]; ];
// Include tenant ID in role data (can be null for global roles)
if ($tenancyEnabled && ! blank($teamForeignKey)) { if ($tenancyEnabled && ! blank($teamForeignKey)) {
$roleData[$teamForeignKey] = $tenantId; $roleData[$teamForeignKey] = $tenantId;
} }