FEATURE #2048: add basics of permissions management

app/Http/Controllers/Admin/Contents/EditContent.php

@@ -16,6 +16,7 @@ use App\Models\Content\Content;
 use App\Models\Content\ContentHistory;
 use App\Models\FileManager\File;
 use Illuminate\Support\Facades\Event;
+use Illuminate\Support\Facades\Gate;
 use Modules\Categories\Contracts\Repositories\Category as ICategory;
 use Modules\Categories\Repositories\Category;
 use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;

app/Http/Controllers/Admin/Login.php

@@ -1,87 +0,0 @@
-<?php
-
-namespace App\Http\Controllers\Admin;
-
-use App\Http\Requests\LoginRequest;
-use App\Models\User;
-use Illuminate\Support\Facades\Auth;
-use Illuminate\Support\Facades\Hash;
-
-/**
- * Class Login
- *
- * @package App\Http\Controllers\Admin
- *
- * @todo    use trait ThrottlesLogins for disabling brutal-force password cracking
- */
-class Login extends Controller
-{
-    /**
-     * Display login form
-     *
-     * @return \Illuminate\Contracts\View\Factory|\Illuminate\View\View
-     */
-    public function getLogin()
-    {
-        return view('admin.loginForm');
-    }
-
-    /**
-     * Login handler
-     *
-     * @param LoginRequest $request
-     *
-     * @return \Illuminate\Http\RedirectResponse
-     */
-    public function postLogin(LoginRequest $request)
-    {
-        $email = $request->email;
-
-        // try to find user
-        $user = User::where('email', $email)
-                    ->where('role', '!=', User::ROLE_VISITOR)
-                    ->where('status', User::STATE_ACTIVE)
-                    ->first();
-
-        if (!$user) {
-            return $this->loginFailed();
-        }
-
-        // try to log in user
-        if (Hash::check($request->password, $user->password)) {
-            Auth::login($user);
-
-            $redirect = $request->redirectTo ? $request->redirectTo : route('admin.dashboard');
-
-            return redirect()->intended($redirect);
-        }
-
-        // login invalid, redirect and inform the user
-        return $this->loginFailed();
-    }
-
-    /**
-     * Logs out user
-     *
-     * @return \Illuminate\Http\RedirectResponse
-     */
-    public function logout()
-    {
-
-        // remove user information
-        \Auth::logout();
-
-        // redirect to login form with info about successfull logout
-        return redirect()
-            ->route('login')
-            ->with('success', trans('admin/common.logoutSuccessfull'));
-    }
-
-    private function loginFailed()
-    {
-        return redirect()
-            ->route('login')
-            ->with('error', trans('auth.failed'))
-            ->withInput();
-    }
-}

app/Http/Controllers/Admin/Permissions.php

@@ -0,0 +1,86 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use Illuminate\Http\Request;
+use App\Http\Controllers\Controller;
+use Illuminate\Support\Facades\Auth;
+
+class Permissions extends Controller
+{
+    /**
+     * Display a listing of the resource.
+     *
+     * @return \Illuminate\Http\Response
+     */
+    public function index()
+    {
+        dd(Auth::user()->permissions);
+    }
+
+    /**
+     * Show the form for creating a new resource.
+     *
+     * @return \Illuminate\Http\Response
+     */
+    public function create()
+    {
+        //
+    }
+
+    /**
+     * Store a newly created resource in storage.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @return \Illuminate\Http\Response
+     */
+    public function store(Request $request)
+    {
+        //
+    }
+
+    /**
+     * Display the specified resource.
+     *
+     * @param  int  $id
+     * @return \Illuminate\Http\Response
+     */
+    public function show($id)
+    {
+        //
+    }
+
+    /**
+     * Show the form for editing the specified resource.
+     *
+     * @param  int  $id
+     * @return \Illuminate\Http\Response
+     */
+    public function edit($id)
+    {
+        //
+    }
+
+    /**
+     * Update the specified resource in storage.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @param  int  $id
+     * @return \Illuminate\Http\Response
+     */
+    public function update(Request $request, $id)
+    {
+        //
+    }
+
+    /**
+     * Remove the specified resource from storage.
+     *
+     * @param  int  $id
+     * @return \Illuminate\Http\Response
+     */
+    public function destroy($id)
+    {
+        //
+    }
+}

app/Http/Kernel.php

@@ -3,6 +3,7 @@
 namespace App\Http;
 
 use App\Http\Middleware\Web\IncrementWidgetsViews;
+use Illuminate\Auth\Middleware\Authorize;
 use Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse;
 use Illuminate\Foundation\Http\Kernel as HttpKernel;
 use Illuminate\Foundation\Http\Middleware\CheckForMaintenanceMode;
@@ -54,6 +55,7 @@ class Kernel extends HttpKernel
      * @var array
      */
     protected $routeMiddleware = [
+        'can'                   => Authorize::class,
         'auth'                  => Middleware\Admin\Authenticate::class,
         'onlyAdmin'             => Middleware\Admin\RequireAdminRole::class,
         'adminMenu'             => Middleware\Admin\AdminMenuRegistrator::class,