FEATURE #2048: prepare routes for ACL, add some more permissions

app/Http/Controllers/Admin/Permissions.php

@@ -2,85 +2,40 @@
 
 namespace App\Http\Controllers\Admin;
 
-use Illuminate\Http\Request;
 use App\Http\Controllers\Controller;
-use Illuminate\Support\Facades\Auth;
+use App\Models\Permissions\Permission;
+use App\Models\User;
+use Illuminate\Http\Request;
 
 class Permissions extends Controller
 {
-    /**
-     * Display a listing of the resource.
-     *
-     * @return \Illuminate\Http\Response
-     */
-    public function index()
-    {
-        dd(Auth::user()->permissions);
-    }
-
-    /**
-     * Show the form for creating a new resource.
-     *
-     * @return \Illuminate\Http\Response
-     */
-    public function create()
-    {
-        //
-    }
-
-    /**
-     * Store a newly created resource in storage.
-     *
-     * @param  \Illuminate\Http\Request  $request
-     * @return \Illuminate\Http\Response
-     */
-    public function store(Request $request)
-    {
-        //
-    }
-
-    /**
-     * Display the specified resource.
-     *
-     * @param  int  $id
-     * @return \Illuminate\Http\Response
-     */
-    public function show($id)
-    {
-        //
-    }
-
-    /**
-     * Show the form for editing the specified resource.
-     *
-     * @param  int  $id
-     * @return \Illuminate\Http\Response
-     */
-    public function edit($id)
-    {
-        //
-    }
-
     /**
      * Update the specified resource in storage.
      *
-     * @param  \Illuminate\Http\Request  $request
-     * @param  int  $id
-     * @return \Illuminate\Http\Response
-     */
-    public function update(Request $request, $id)
-    {
-        //
-    }
-
-    /**
-     * Remove the specified resource from storage.
+     * @param  \Illuminate\Http\Request $request
+     * @param  int                      $id
      *
-     * @param  int  $id
      * @return \Illuminate\Http\Response
      */
-    public function destroy($id)
+    public function update(Request $request, User $user)
     {
-        //
+        $permissionIds = $request->get('permissions', []);
+        $permissions = Permission::whereIn('string_id', array_keys($permissionIds))
+                                 ->get();
+
+        \DB::transaction(function () use ($user, $permissions) {
+            // remove all permissions
+            $user->permissions()
+                 ->detach();
+
+            foreach ($permissions as $permission) {
+                $user->permissions()
+                     ->attach($permission->id);
+            }
+        });
+
+        return redirect()
+            ->back()
+            ->with('success', trans('admin/permissions.successfullySet'));
     }
 }

app/Http/Controllers/Admin/Users/UserDetail.php

@@ -5,6 +5,7 @@ namespace App\Http\Controllers\Admin\Users;
 use App\CMS\Enumerations\UserRoles;
 use App\CMS\Enumerations\UserStates;
 use App\Cms\Repositories\ActionLog\Actions;
+use App\CMS\Repositories\Permissions\Permission;
 use App\Http\Controllers\Admin\Controller;
 use App\Models\ActionLog\ActionLog;
 use App\Models\User;
@@ -29,16 +30,17 @@ class UserDetail extends Controller
             $user = Auth::user();
         }
 
-
         $actions = $this->log->getUserActions($user->id, 10);
         $roles = UserRoles::getWithTranslations();
         $states = UserStates::getWithTranslations();
+        $permissions = app(Permission::class)->getRootPermissions();
 
         return view('admin.userManagement.detail', [
-            'user'     => $user,
-            'statuses' => $states,
-            'roles'    => $roles,
-            'actions'  => $actions
+            'user'        => $user,
+            'statuses'    => $states,
+            'roles'       => $roles,
+            'actions'     => $actions,
+            'permissions' => $permissions
         ]);
     }
 }

app/Http/Kernel.php

@@ -57,7 +57,6 @@ class Kernel extends HttpKernel
     protected $routeMiddleware = [
         'can'                   => Authorize::class,
         'auth'                  => Middleware\Admin\Authenticate::class,
-        'onlyAdmin'             => Middleware\Admin\RequireAdminRole::class,
         'adminMenu'             => Middleware\Admin\AdminMenuRegistrator::class,
         'guest'                 => Middleware\RedirectIfAuthenticated::class,
         'throttle'              => ThrottleRequests::class,

app/Http/Middleware/Admin/RequireAdminRole.php

@@ -1,28 +0,0 @@
-<?php
-
-namespace App\Http\Middleware\Admin;
-
-use App\Models\User;
-use Closure;
-
-class RequireAdminRole
-{
-    /**
-     * Handle an incoming request.
-     *
-     * @param  \Illuminate\Http\Request $request
-     * @param  \Closure                 $next
-     *
-     * @return mixed
-     */
-    public function handle($request, Closure $next)
-    {
-        if (\Auth::user()->role != User::ROLE_ADMIN) {
-            return redirect()
-                ->back()
-                ->with('error', trans('auth.accessDenied'));
-        }
-
-        return $next($request);
-    }
-}