FEATURE #2047: use laravel's authorization

2017-08-02 13:33:26 +02:00
parent 67fb3c6945
commit a4c020daa0
60 changed files with 1357 additions and 50 deletions
@@ -0,0 +1,42 @@
+<?php
+Route::group(['namespace' => 'Contents'], function () {
+    // list of all static pages
+    Route::get('content/overview/{module?}', 'ContentOverview@index')
+         ->name('content.overview');
+
+    // form for creating new static page
+    Route::get('content/new/{module}', 'CreateNewContent@create')
+         ->name('content.new');
+
+    // form for editing existing static page
+    Route::get('content/edit/{page}', 'EditContent@edit')
+         ->name('content.edit');
+
+    // post method for creating new static page
+    Route::post('content/new/{module}', 'CreateNewContent@store')
+         ->name('content.newPost');
+
+    // post method for creating new static page
+    Route::post('content/edit/{page}', 'EditContent@update')
+         ->name('content.editPost');
+
+    // change status of page (protected, public or draft)
+    Route::get('content/status/{page}/{status}', 'ContentActions@changeStatus')
+         ->name('content.changeStatus');
+
+    // set homepage
+    Route::get('content/homepage/{page}', 'ContentActions@setHomepage')
+         ->name('content.setHomepage');
+
+    // delete page
+    Route::get('content/delete/{page}', 'ContentActions@delete')
+         ->name('content.delete');
+
+    // history of changes for specified page
+    Route::get('history/{page}', 'History@getOverview')
+         ->name('content.history');
+
+    // history of changes for specified page
+    Route::get('history/{revision}', 'History@getDiff')
+         ->name('history.diff');
+});
@@ -0,0 +1,29 @@
+<?php
+Route::group(['namespace' => 'FileManager'], function () {
+
+    Route::get('files/overview/{directory?}', 'UploadedFilesOverview@index')
+         ->name('upload.overview');
+
+    // uploader methods
+    Route::get('directories/edit/{directory}', 'EditDirectory@edit')
+         ->name('upload.editDirectory');
+
+    Route::post('directories/edit/{directory}', 'EditDirectory@update')
+         ->name('upload.postEditDirectory');
+
+    route::post('directories/new', 'CreateNewDirectory@store')
+         ->name('upload.postNewDirectory');
+
+    Route::get('upload/detail/{file}', 'EditUploadedFile@show')
+         ->name('upload.detail');
+
+    Route::post('upload/detail/{file}', 'EditUploadedFile@update')
+         ->name('upload.postEdit');
+
+    Route::get('upload/delete/{file}', 'EditUploadedFile@delete')
+         ->name('upload.delete');
+
+    // uploader methods
+    Route::post('upload', 'UploadFile@store')
+         ->name('upload.postFile');
+});
@@ -0,0 +1,7 @@
+<?php
+// form with settings
+Route::get('settings', 'Settings@getOverview')
+     ->name('settings.overview');
+
+Route::post('settings', 'Settings@saveSettings')
+     ->name('settings.save');
@@ -0,0 +1,15 @@
+<?php
+// these routes are available only for user with role admin
+Route::group(['middleware' => 'onlyAdmin', 'namespace' => 'Templates'], function () {
+    Route::get('templates/overview/path/{templatePath}', 'TemplateOverview@getPath')
+         ->name('templates.overview');
+
+    Route::post('templates/copy', 'CopyTemplate@createCopy')
+         ->name('templates.postCopy');
+
+    Route::get('templates/edit/{template}', 'EditTemplate@getEdit')
+         ->name('templates.edit');
+
+    Route::post('templates/edit/{template}', 'EditTemplate@postEdit')
+         ->name('templates.postEdit');
+});
@@ -0,0 +1,27 @@
+<?php
+Route::group(['namespace' => 'Users'], function () {
+    // display form for creating new user
+    Route::get('users/new', 'CreateNewUser@getNewUser')
+         ->name('users.new');
+
+    // POST methods
+    // display form for creating new user
+    Route::post('users/new', 'CreateNewUser@postRegistration')
+         ->name('users.newPost');
+
+    // display form for edit of existing user
+    Route::get('users/edit/{user}', 'EditUser@getEditUser')
+         ->name('users.edit');
+
+    // display user detail in admin
+    Route::get('users/detail/{user?}', 'UserDetail@getDetail')
+         ->name('users.detail');
+
+    // method for saving edited data of user
+    Route::post('users/edit/{user}', 'EditUser@postEdit')
+         ->name('users.editPost');
+
+    // display list of all users registered into our system
+    Route::get('users/overview/{state?}/{perPage?}', 'UsersOverview@getOverview')
+         ->name('users.overview');
+});
@@ -0,0 +1,60 @@
+<?php
+// routes for widget areas
+Route::group(['namespace' => 'Widgets'], function () {
+
+    // list of all installed widget types
+    Route::get('widgets', 'WidgetsOverview@index')
+         ->name('widgets.overview');
+
+    // create new instance of widget of given type
+    Route::get('widgets/new/{widgetType}', 'CreateNewWidget@getNew')
+         ->name('widgets.new');
+
+    Route::post('widgets/new/{widgetType}', 'CreateNewWidget@postNew')
+         ->name('widgets.postNew');
+
+    // edit widget settings
+    Route::get('widgets/edit/{widget}', 'EditWidget@getEdit')
+         ->name('widgets.edit');
+
+    // delete widget settings
+    Route::get('widgets/delete/{widget}', 'EditWidget@deleteWidget')
+         ->name('widgets.delete');
+
+    Route::post('widgets/edit/{widget}', 'EditWidget@postEdit')
+         ->name('widgets.postEdit');
+
+    // display form for association of widget and widget area
+    Route::get('widgets/associate/{widgetArea}', 'AssociateWidget@getList')
+         ->name('widgets.associate');
+
+    Route::get('widgets/deassociate/{widget}/{widgetArea}', 'AssociateWidget@deleteAssociation')
+         ->name('widgets.deleteAssociation');
+
+    Route::get('widgets/associate/{widget}/{widgetArea}', 'AssociateWidget@makeAssociation')
+         ->name('widgets.makeAssociation');
+
+    Route::group(['namespace' => 'Areas'], function () {
+        Route::get('widgets/areas/overview', 'WidgetAreaOverview@getOverview')
+             ->name('widgetareas.overview');
+
+        // form for new widget area
+        Route::get('widgets/areas/new', 'CreateNewWidgetArea@create')
+             ->name('widgetareas.new');
+
+        // form for new widget area
+        Route::post('widgets/areas/new', 'CreateNewWidgetArea@store')
+             ->name('widgetareas.postNew');
+
+        // edit form for widget area
+        Route::get('widgets/areas/edit/{widgetArea}', 'EditWidgetArea@edit')
+             ->name('widgetareas.edit');
+
+        Route::post('widgets/areas/edit/{widgetArea}', 'EditWidgetArea@update')
+             ->name('widgetareas.postEdit');
+
+        // edit form for widget area
+        Route::get('widgets/areas/delete/{widgetArea}', 'EditWidgetArea@delete')
+             ->name('widgetareas.delete');
+    });
+});
@@ -0,0 +1,64 @@
+<?php
+
+/**
+ * This routing groups is used for routing along public part of website
+ */
+
+use Mcamara\LaravelLocalization\Facades\LaravelLocalization;
+
+Route::pattern('id', '\d+');
+Route::pattern('url', '[0-9\-a-z]+');
+
+/*******************************************************************************/
+Auth::routes();
+$this->get('logout', 'Auth\LoginController@logout')->name('logout');
+
+Route::group(['prefix' => LaravelLocalization::setLocale(), 'middleware' => ['bindings']],  function () {
+    /**
+     * This route group serves to handle request in admin
+     */
+    Route::group([
+                     'middleware' => ['admin'],
+                     'namespace'  => 'Admin',
+                     'prefix'     => 'admin'
+                 ], function () {
+
+        // include all routes in routes/admin subfolder
+        $files = ['contents', 'fileManager', 'settings', 'templates', 'users', 'widgets'];
+        foreach ($files as $file) {
+            require_once __DIR__ . DIRECTORY_SEPARATOR . 'admin' . DIRECTORY_SEPARATOR . $file . '.php';
+        }
+
+        // display dashboard with some usefull information
+        Route::get('/', 'Dashboard\Dashboard@index')
+             ->name('admin.dashboard');
+
+        // list of all actions
+        Route::get('actions', 'ActionLog\Overview@index')
+             ->name('log.overview');
+
+        // search form with results
+        Route::get('search', 'Search@getSearch')
+             ->name('search');
+    });
+
+    /**************************************************************************************/
+
+    /**
+     * This section must be specified as last one
+     */
+    Route::group(['middleware' => ['web']], function () {
+
+        // Homepage
+        Route::get('/', 'Visitor\Homepage@getIndex')
+             ->name('page.index');
+
+        // route for sitemap
+        Route::get('sitemap.xml', 'Visitor\Sitemap@getMap')
+             ->name('sitemap');
+
+        // route for all content pages. This rule must be specified last (because it matches every route)
+        Route::get('{url}', 'Visitor\ContentPage@getPage')
+             ->name('page.content');
+    });
+});