avives
1f72193a64
Some checks are pending
Module sub-split / Sub-split (push) Waiting to run
- Base: wintercms/winter branch 1.2 (full framework) - Theme vivespos: Canvas 7 + Bootstrap 5 CDN, custom CSS - Layout: deferred GTM/GA4 tracking, JSON-LD SoftwareApplication - Partials: hero (offline-first), features, modes (offline/nube toggle), screenshots, pricing (3 planes), comparison, FAQ, CTA - Plugin VivesPOS.Site with ContactForm - Dockerfile: PHP 8.2 Apache, port 80, healthcheck - Added winter/wn-pages, blog, sitemap, seo plugins - Active theme set to vivespos
102 lines
2.8 KiB
PHP
102 lines
2.8 KiB
PHP
<?php namespace Backend\Models;
|
|
|
|
use Backend\Classes\AuthManager;
|
|
use Winter\Storm\Auth\Models\Role as RoleBase;
|
|
|
|
/**
|
|
* Administrator role
|
|
*
|
|
* @package winter\wn-backend-module
|
|
* @author Alexey Bobkov, Samuel Georges
|
|
*/
|
|
class UserRole extends RoleBase
|
|
{
|
|
const CODE_DEVELOPER = 'developer';
|
|
const CODE_PUBLISHER = 'publisher';
|
|
|
|
/**
|
|
* @var string The database table used by the model.
|
|
*/
|
|
protected $table = 'backend_user_roles';
|
|
|
|
/**
|
|
* @var array Validation rules
|
|
*/
|
|
public $rules = [
|
|
'name' => 'required|between:2,128|unique',
|
|
'code' => 'unique',
|
|
];
|
|
|
|
/**
|
|
* @var array Relations
|
|
*/
|
|
public $hasMany = [
|
|
'users' => [User::class, 'key' => 'role_id'],
|
|
'users_count' => [User::class, 'key' => 'role_id', 'count' => true]
|
|
];
|
|
|
|
public function filterFields($fields)
|
|
{
|
|
// System roles cannot have their code or permissions changed
|
|
if ($this->isSystemRole()) {
|
|
$fields->code->disabled = true;
|
|
$fields->permissions->disabled = true;
|
|
}
|
|
}
|
|
|
|
public function afterFetch()
|
|
{
|
|
// System role permissions are determined by the permissions that attach
|
|
// themselves to the given role's code via the `roles` property.
|
|
if ($this->isSystemRole()) {
|
|
$this->permissions = $this->getDefaultPermissions();
|
|
}
|
|
}
|
|
|
|
public function beforeSave()
|
|
{
|
|
// System roles cannot have their code or permissions changed
|
|
if ($this->isSystemRole()) {
|
|
$this->is_system = true;
|
|
$this->permissions = [];
|
|
if ($this->exists) {
|
|
$this->code = $this->getOriginal('code');
|
|
}
|
|
}
|
|
}
|
|
|
|
public function isSystemRole()
|
|
{
|
|
// System roles must have a valid code property
|
|
if (!$this->code || !strlen(trim($this->code))) {
|
|
return false;
|
|
}
|
|
|
|
// Winter default system roles
|
|
if ($this->is_system || in_array($this->code, [
|
|
self::CODE_DEVELOPER,
|
|
self::CODE_PUBLISHER
|
|
])) {
|
|
return true;
|
|
}
|
|
|
|
// If any permission attaches itself to a given role's code
|
|
// that role is now considered a system role
|
|
return AuthManager::instance()->hasPermissionsForRole($this->code);
|
|
}
|
|
|
|
/**
|
|
* Get the permissions that have attached themselves to the current role
|
|
*/
|
|
public function getDefaultPermissions(): array
|
|
{
|
|
// Only the Develper role inherits all "orphaned" / unassigned permissions by default
|
|
$includeOrphanedPermissions = false;
|
|
if ($this->code === self::CODE_DEVELOPER) {
|
|
$includeOrphanedPermissions = true;
|
|
}
|
|
|
|
return AuthManager::instance()->listPermissionsForRole($this->code, $includeOrphanedPermissions);
|
|
}
|
|
}
|