freescout/freescout-dist/app/Policies/ThreadPolicy.php

43 lines
1.0 KiB
PHP
Raw Permalink Normal View History

2023-12-22 19:40:32 +00:00
<?php
namespace App\Policies;
use App\Thread;
use App\User;
use Illuminate\Auth\Access\HandlesAuthorization;
class ThreadPolicy
{
use HandlesAuthorization;
/**
* Determine whether the user can edit the thread.
*
* @param \App\User $user
* @param \App\Thread $thread
*
* @return mixed
*/
public function edit(User $user, Thread $thread)
{
if (($thread->created_by_user_id
&& in_array($thread->type, [Thread::TYPE_MESSAGE, Thread::TYPE_NOTE])
&& ($user->isAdmin() || ($user->hasPermission(User::PERM_EDIT_CONVERSATIONS) && $thread->created_by_user_id == $user->id)))
|| ($thread->created_by_customer_id && in_array($thread->type, [Thread::TYPE_CUSTOMER]))
) {
return true;
} else {
return false;
}
}
public function delete(User $user, Thread $thread)
{
if ($thread->created_by_user_id == $user->id) {
return true;
} else {
return false;
}
}
}