FEATURE #2048: prepare routes for ACL, add some more permissions

app/Policies/ContentPolicy.php

@@ -2,48 +2,28 @@
 
 namespace App\Policies;
 
-use App\Models\User;
 use App\Models\Content\Content;
+use App\Models\User;
 use Illuminate\Auth\Access\HandlesAuthorization;
 
 class ContentPolicy extends BasicPolicy
 {
     use HandlesAuthorization;
-
-    /**
-     * Determine whether the user can view the content.
-     *
-     * @param  \App\Models\User  $user
-     * @param  \App\Models\Content\Content  $content
-     * @return mixed
-     */
-    public function view(User $user, Content $content)
-    {
-        //
-    }
-
-    /**
-     * Determine whether the user can create contents.
-     *
-     * @param  \App\Models\User  $user
-     * @return mixed
-     */
-    public function create(User $user)
-    {
-        return true;
-    }
+    protected $entity = 'contents';
 
     /**
      * Determine whether the user can update the content.
      *
-     * @param  \App\Models\User  $user
-     * @param  \App\Models\Content\Content  $content
+     * @param  \App\Models\User            $user
+     * @param  \App\Models\Content\Content $content
+     *
      * @return mixed
      */
     public function update(User $user, Content $content)
     {
-        if (!$user->hasAbility('update-contents-'.$content->module->alias))
+        if (!$user->hasAbility('update-contents-' . $content->module->alias)) {
             return false;
+        }
 
         if ($user->id != $content->user_id) {
             return $user->hasAbility('update-contents') && $user->hasAbility('update-all-contents');
@@ -52,15 +32,21 @@ class ContentPolicy extends BasicPolicy
         return $user->hasAbility('update-contents');
     }
 
-    /**
-     * Determine whether the user can delete the content.
-     *
-     * @param  \App\Models\User  $user
-     * @param  \App\Models\Content\Content  $content
-     * @return mixed
-     */
-    public function delete(User $user, Content $content)
+    public function create(User $user, Content $content) {
+        return $user->hasAbility('create-contents');
+    }
+
+    public function publish(User $user, Content $content)
     {
-        return $user->hasAbility('delete-contents');
+        return $user->hasAbility('publish-contents');
+    }
+
+    public function setHomepage(User $user, Content $content)
+    {
+        return $user->hasAbility('set-homepage-contents');
+    }
+
+    public function viewHistory(User $user, Content $content) {
+        return $user->hasAbility('view-history-contents');
     }
 }