74 lines
1.8 KiB
PHP
74 lines
1.8 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Middleware;
|
|
|
|
use Closure;
|
|
use DB;
|
|
|
|
use App\Models\User\UserPermission;
|
|
|
|
class RequirePermission
|
|
{
|
|
/**
|
|
* Handle an incoming request.
|
|
*
|
|
* @param \Illuminate\Http\Request $request
|
|
* @param \Closure $next
|
|
* @return mixed
|
|
*/
|
|
public function handle($request, Closure $next, $permission)
|
|
{
|
|
$confirmed = false;
|
|
|
|
if(strpos($permission, 'role.')) {
|
|
$confirmed = $this->CheckRole($permission);
|
|
} else {
|
|
$confirmed = $this->CheckPermission($permission);
|
|
}
|
|
|
|
if($confirmed === false) {
|
|
abort(403, "You don't have permission to access this area.");
|
|
}
|
|
|
|
return $next($request);
|
|
}
|
|
|
|
private function CheckPermission($permission) {
|
|
$confirmed = false;
|
|
|
|
$check = UserPermission::where(['character_id' => auth()->user()->character_id, 'permission' => $permission])->get(['permission']);
|
|
if(!isset($check[0]->permission)) {
|
|
return false;
|
|
} else {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
private function CheckRole($role) {
|
|
$confirmed = false;
|
|
|
|
$ranking = [
|
|
'role.none' => 0,
|
|
'role.guest' => 1,
|
|
'role.user' => 2,
|
|
'role.director' => 3,
|
|
'role.admin' => 4,
|
|
];
|
|
//Using eloquent let's get the roles for the character
|
|
$check = UserPermission::where('character_id', auth()->user()->character_id)->get(['permission']);
|
|
|
|
if(!isset($check[0]->role)) {
|
|
abort(403, "You don't have permissions to access this area!");
|
|
}
|
|
|
|
if($ranking[$check[0]->role] === $ranking[$role]) {
|
|
$confirmed = true;
|
|
}
|
|
if($ranking[$check[0]->role] >= $ranking[$role]) {
|
|
$confirmed = true;
|
|
}
|
|
|
|
return $confirmed;
|
|
}
|
|
}
|