This commit is contained in:
2023-10-02 17:18:53 +10:00
parent 6e98269a0b
commit 1ef4332df6
6 changed files with 23 additions and 4 deletions

View File

@@ -21,6 +21,7 @@ class UserConductor extends Conductor
*/
public function fields(Model $model): array
{
/** @var \App\Models\User */
$user = auth()->user();
if ($user === null || $user->hasPermission('admin/users') === false) {
return ['id', 'display_name'];
@@ -37,12 +38,11 @@ class UserConductor extends Conductor
*/
public function transform(Model $model): array
{
/** @var \App\Models\User */
$user = auth()->user();
$data = $model->toArray();
$limit = $this->fields($model);
// echo 'USER--' . implode(',', $limit) . "\n";
if ($user === null || ($user->hasPermission('admin/users') === false && strcasecmp($user->id, $model->id) !== 0)) {
$limit = ['id', 'display_name'];
} else {
@@ -61,6 +61,7 @@ class UserConductor extends Conductor
*/
public static function updatable(Model $model): bool
{
/** @var \App\Models\User */
$user = auth()->user();
if ($user !== null) {
return ($user->hasPermission('admin/users') === true || strcasecmp($user->id, $model->id) === 0);
@@ -77,6 +78,7 @@ class UserConductor extends Conductor
*/
public static function destroyable(Model $model): bool
{
/** @var \App\Models\User */
$user = auth()->user();
return ($user !== null && $user->hasPermission('admin/users') === true);
}