Community profile permissions

code4romania · Dec 13, 2024 · 061ae5a · 061ae5a
1 parent 3183962
commit 061ae5a
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 6 deletions.
diff --git a/app/Concerns/HasPermissions.php b/app/Concerns/HasPermissions.php
@@ -75,7 +75,7 @@ public function hasAccessToNomenclature(): bool
         return (bool) $this->permissions?->admin_permissions->contains(AdminPermission::CAN_CHANGE_NOMENCLATURE);
     }
 
-    public function hasAccessToCommunity(): bool
+    public function canChangeOrganizationProfile(): bool
     {
         if ($this->isAdmin()) {
             return true;

diff --git a/app/Filament/Organizations/Resources/CommunityProfileResource.php b/app/Filament/Organizations/Resources/CommunityProfileResource.php
@@ -31,6 +31,11 @@ class CommunityProfileResource extends Resource
 
     protected static ?int $navigationSort = 21;
 
+    public static function canAccess(): bool
+    {
+        return auth()->user()->canChangeOrganizationProfile();
+    }
+
     public static function getNavigationGroup(): ?string
     {
         return __('navigation.community._group');

diff --git a/app/Policies/CommunityProfilePolicy.php b/app/Policies/CommunityProfilePolicy.php
@@ -14,39 +14,39 @@ class CommunityProfilePolicy
      */
     public function viewAny(User $user): bool
     {
-        return $user->hasAccessToCommunity();
+        return true;
     }
 
     /**
      * Determine whether the user can view the model.
      */
     public function view(User $user, CommunityProfile $communityProfile): bool
     {
-        return $user->hasAccessToCommunity();
+        return true;
     }
 
     /**
      * Determine whether the user can create models.
      */
     public function create(User $user): bool
     {
-        return $user->hasAccessToCommunity();
+        return true;
     }
 
     /**
      * Determine whether the user can update the model.
      */
     public function update(User $user, CommunityProfile $communityProfile): bool
     {
-        return $user->hasAccessToCommunity();
+        return true;
     }
 
     /**
      * Determine whether the user can delete the model.
      */
     public function delete(User $user, CommunityProfile $communityProfile): bool
     {
-        return $user->hasAccessToCommunity();
+        return true;
     }
 
     /**