minicms/core
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

FEATURE #2048: prepare routes for ACL, add some more permissions

Browse Source
This commit is contained in:
Michal Kváček
2017-08-11 02:07:31 +02:00
parent cccdbda543
commit 335ec4a167
41 changed files with 836 additions and 489 deletions
Download Patch File Download Diff File Expand all files Collapse all files
routes/admin.php
+2 -1
View File
@@ -31,7 +31,8 @@ Route::group([
// list of all actions
Route::get('actions', 'ActionLog\Overview@index')
->name('log.overview');
->name('log.overview')
->middleware('can:manage,' . \App\Models\ActionLog\ActionLog::class);
// search form with results
Route::get('search', 'Search@getSearch')
routes/admin/contents.php
+16 -8
View File
@@ -2,7 +2,8 @@
Route::group(['namespace' => 'Contents'], function () {
// list of all static pages
Route::get('content/overview/{module?}', 'ContentOverview@index')
->name('content.overview');
->name('content.overview')
->middleware('can:manage,' . \App\Models\Content\Content::class);
// form for creating new static page
Route::get('content/new/{module}', 'CreateNewContent@create')
@@ -16,29 +17,36 @@ Route::group(['namespace' => 'Contents'], function () {
// post method for creating new static page
Route::post('content/new/{module}', 'CreateNewContent@store')
->name('content.newPost');
->name('content.newPost')
->middleware('can:create,module');
// post method for creating new static page
Route::post('content/edit/{page}', 'EditContent@update')
->name('content.editPost');
->name('content.editPost')
->middleware('can:update,page');
// change status of page (protected, public or draft)
Route::get('content/status/{page}/{status}', 'ContentActions@changeStatus')
->name('content.changeStatus');
->name('content.changeStatus')
->middleware('can:changeStatus,page');
// set homepage
Route::get('content/homepage/{page}', 'ContentActions@setHomepage')
->name('content.setHomepage');
->name('content.setHomepage')
->middleware('can:setHomepage,page');
// delete page
Route::get('content/delete/{page}', 'ContentActions@delete')
->name('content.delete');
->name('content.delete')
->middleware('can:delete,page');
// history of changes for specified page
Route::get('history/{page}', 'History@getOverview')
->name('content.history');
->name('content.history')
->middleware('can:viewHistory,page');
// history of changes for specified page
Route::get('history/{revision}', 'History@getDiff')
->name('history.diff');
->name('history.diff')
->middleware('can:viewHistory,page');
});
routes/admin/fileManager.php
+16 -8
View File
@@ -2,28 +2,36 @@
Route::group(['namespace' => 'FileManager'], function () {
Route::get('files/overview/{directory?}', 'UploadedFilesOverview@index')
->name('upload.overview');
->name('upload.overview')
->middleware('can:manage,' . \App\Models\FileManager\File::class);
// uploader methods
Route::get('directories/edit/{directory}', 'EditDirectory@edit')
->name('upload.editDirectory');
->name('upload.editDirectory')
->middleware('can:update,directory');
Route::post('directories/edit/{directory}', 'EditDirectory@update')
->name('upload.postEditDirectory');
->name('upload.postEditDirectory')
->middleware('can:update,directory');
route::post('directories/new', 'CreateNewDirectory@store')
->name('upload.postNewDirectory');
->name('upload.postNewDirectory')
->middleware('can:create,directory');
Route::get('upload/detail/{file}', 'EditUploadedFile@show')
->name('upload.detail');
->name('upload.detail')
->middleware('can:manage,' . \App\Models\FileManager\File::class);
Route::post('upload/detail/{file}', 'EditUploadedFile@update')
->name('upload.postEdit');
->name('upload.postEdit')
->middleware('can:update,file');
Route::get('upload/delete/{file}', 'EditUploadedFile@delete')
->name('upload.delete');
->name('upload.delete')
->middleware('can:delete,file');
// uploader methods
Route::post('upload', 'UploadFile@store')
->name('upload.postFile');
->name('upload.postFile')
->middleware('can:upload,' . \App\Models\FileManager\File::class);
});
routes/admin/permissions.php
+3 -1
View File
@@ -1,3 +1,5 @@
<?php
Route::resource('permissions', 'Permissions');
Route::post('permissions/{user}', 'Permissions@update')
->middleware('can:set-permissions,user')
->name('permissions.update');
routes/admin/settings.php
+4 -2
View File
@@ -1,7 +1,9 @@
<?php
// form with settings
Route::get('settings', 'Settings@getOverview')
->name('settings.overview');
->name('settings.overview')
->middleware('can:manage,' . \App\Models\Settings::class);
Route::post('settings', 'Settings@saveSettings')
->name('settings.save');
->name('settings.save')
->middleware('can:manage,' . \App\Models\Settings::class);
routes/admin/templates.php
+9 -5
View File
@@ -1,15 +1,19 @@
<?php
// these routes are available only for user with role admin
Route::group(['middleware' => 'onlyAdmin', 'namespace' => 'Templates'], function () {
Route::group(['namespace' => 'Templates'], function () {
Route::get('templates/overview/path/{templatePath}', 'TemplateOverview@getPath')
->name('templates.overview');
->name('templates.overview')
->middleware('can:manage,' . \App\Models\Templates\Template::class);
Route::post('templates/copy', 'CopyTemplate@createCopy')
->name('templates.postCopy');
->name('templates.postCopy')
->middleware('can:copy,' . \App\Models\Templates\Template::class);
Route::get('templates/edit/{template}', 'EditTemplate@getEdit')
->name('templates.edit');
->name('templates.edit')
->middleware('can:update,template');
Route::post('templates/edit/{template}', 'EditTemplate@postEdit')
->name('templates.postEdit');
->name('templates.postEdit')
->middleware('can:update,template');
});
routes/admin/users.php
+12 -6
View File
@@ -2,26 +2,32 @@
Route::group(['namespace' => 'Users'], function () {
// display form for creating new user
Route::get('users/new', 'CreateNewUser@getNewUser')
->name('users.new');
->name('users.new')
->middleware('can:create,' . \App\Models\User::class);
// POST methods
// display form for creating new user
Route::post('users/new', 'CreateNewUser@postRegistration')
->name('users.newPost');
->name('users.newPost')
->middleware('can:create,' . \App\Models\User::class);
// display form for edit of existing user
Route::get('users/edit/{user}', 'EditUser@getEditUser')
->name('users.edit');
->name('users.edit')
->middleware('can:update,user');
// display user detail in admin
Route::get('users/detail/{user?}', 'UserDetail@getDetail')
->name('users.detail');
->name('users.detail')
->middleware('can:manage,' . \App\Models\User::class);
// method for saving edited data of user
Route::post('users/edit/{user}', 'EditUser@postEdit')
->name('users.editPost');
->name('users.editPost')
->middleware('can:update,user');
// display list of all users registered into our system
Route::get('users/overview/{state?}/{perPage?}', 'UsersOverview@getOverview')
->name('users.overview');
->name('users.overview')
->middleware('can:manage,' . \App\Models\User::class);
});
routes/admin/widgets.php
+12 -6
View File
@@ -4,25 +4,31 @@ Route::group(['namespace' => 'Widgets'], function () {
// list of all installed widget types
Route::get('widgets', 'WidgetsOverview@index')
->name('widgets.overview');
->name('widgets.overview')
->middleware('can:update,' . \App\Models\Widgets\Widget::class);
// create new instance of widget of given type
Route::get('widgets/new/{widgetType}', 'CreateNewWidget@getNew')
->name('widgets.new');
->name('widgets.new')
->middleware('can:create,' . \App\Models\Widgets\Widget::class);
Route::post('widgets/new/{widgetType}', 'CreateNewWidget@postNew')
->name('widgets.postNew');
->name('widgets.postNew')
->middleware('can:createf,' . \App\Models\Widgets\Widget::class);
// edit widget settings
Route::get('widgets/edit/{widget}', 'EditWidget@getEdit')
->name('widgets.edit');
->name('widgets.edit')
->middleware('can:update,widget');
// delete widget settings
Route::get('widgets/delete/{widget}', 'EditWidget@deleteWidget')
->name('widgets.delete');
->name('widgets.delete')
->middleware('can:delete,widget');
Route::post('widgets/edit/{widget}', 'EditWidget@postEdit')
->name('widgets.postEdit');
->name('widgets.postEdit')
->middleware('can:update,widget');
// display form for association of widget and widget area
Route::get('widgets/associate/{widgetArea}', 'AssociateWidget@getList')