1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
|
<?php
/**
* UserFrosting (http://www.userfrosting.com)
*
* @link https://github.com/userfrosting/UserFrosting
* @license https://github.com/userfrosting/UserFrosting/blob/master/licenses/UserFrosting.md (MIT License)
*/
namespace UserFrosting\Sprinkle\Account\Database\Models;
use Illuminate\Database\Capsule\Manager as Capsule;
use UserFrosting\Sprinkle\Core\Database\Models\Model;
/**
* Permission Class.
*
* Represents a permission for a role or user.
* @author Alex Weissman (https://alexanderweissman.com)
* @property string slug
* @property string name
* @property string conditions
* @property string description
*/
class Permission extends Model
{
/**
* @var string The name of the table for the current model.
*/
protected $table = "permissions";
protected $fillable = [
"slug",
"name",
"conditions",
"description"
];
/**
* @var bool Enable timestamps for this class.
*/
public $timestamps = TRUE;
/**
* Delete this permission from the database, removing associations with roles.
*
*/
public function delete() {
// Remove all role associations
$this->roles()->detach();
// Delete the permission
$result = parent::delete();
return $result;
}
/**
* Get a list of roles to which this permission is assigned.
*
* @return \Illuminate\Database\Eloquent\Relations\BelongsToMany
*/
public function roles() {
/** @var UserFrosting\Sprinkle\Core\Util\ClassMapper $classMapper */
$classMapper = static::$ci->classMapper;
return $this->belongsToMany($classMapper->getClassMapping('role'), 'permission_roles', 'permission_id', 'role_id')->withTimestamps();
}
/**
* Query scope to get all permissions assigned to a specific role.
*
* @param \Illuminate\Database\Eloquent\Builder $query
* @param int $roleId
* @return \Illuminate\Database\Eloquent\Builder
*/
public function scopeForRole($query, $roleId) {
return $query->join('permission_roles', function ($join) use ($roleId) {
$join->on('permission_roles.permission_id', 'permissions.id')
->where('role_id', $roleId);
});
}
/**
* Query scope to get all permissions NOT associated with a specific role.
*
* @param \Illuminate\Database\Eloquent\Builder $query
* @param int $roleId
* @return \Illuminate\Database\Eloquent\Builder
*/
public function scopeNotForRole($query, $roleId) {
return $query->join('permission_roles', function ($join) use ($roleId) {
$join->on('permission_roles.permission_id', 'permissions.id')
->where('role_id', '!=', $roleId);
});
}
/**
* Get a list of users who have this permission, along with a list of roles through which each user has the permission.
*
* @return \UserFrosting\Sprinkle\Core\Database\Relations\BelongsToManyThrough
*/
public function users() {
/** @var UserFrosting\Sprinkle\Core\Util\ClassMapper $classMapper */
$classMapper = static::$ci->classMapper;
return $this->belongsToManyThrough(
$classMapper->getClassMapping('user'),
$classMapper->getClassMapping('role'),
'permission_roles',
'permission_id',
'role_id',
'role_users',
'role_id',
'user_id'
);
}
}
|
