Files
FlightsAPI/app/Policies/UserPolicy.php
T
2026-06-20 22:21:17 +10:00

83 lines
1.6 KiB
PHP

<?php
namespace App\Policies;
use App\Models\User;
use Illuminate\Auth\Access\Response;
class UserPolicy
{
public function viewProfileData(?User $viewer, User $profileUser): bool
{
if ($viewer && ($viewer->id === $profileUser->id || $viewer->hasRole('admin'))) {
return true;
}
$isPrivate = $profileUser->resolved_settings['private_profile'] == 'private';
if (!$isPrivate) {
return true;
}
return $viewer && $viewer->isFollowing($profileUser);
}
/**
* Determine whether the user can view any models.
*/
public function viewAny(User $user): bool
{
return false;
}
/**
* Determine whether the user can view the model.
*/
public function view(User $user, User $model): bool
{
return false;
}
/**
* Determine whether the user can create models.
*/
public function create(User $user): bool
{
return false;
}
/**
* Determine whether the user can update the model.
*/
public function update(User $user, User $model): bool
{
return false;
}
/**
* Determine whether the user can delete the model.
*/
public function delete(User $user, User $model): bool
{
return false;
}
/**
* Determine whether the user can restore the model.
*/
public function restore(User $user, User $model): bool
{
return false;
}
/**
* Determine whether the user can permanently delete the model.
*/
public function forceDelete(User $user, User $model): bool
{
return false;
}
}