BookStack/app/Auth/Role.php

109 lines
2.7 KiB
PHP
Raw Normal View History

<?php namespace BookStack\Auth;
use BookStack\Auth\Permissions\JointPermission;
use BookStack\Auth\Permissions\RolePermission;
use BookStack\Model;
2015-08-29 10:03:42 -04:00
class Role extends Model
{
protected $fillable = ['display_name', 'description', 'external_auth_id'];
2015-09-05 12:42:05 -04:00
2015-08-29 10:03:42 -04:00
/**
* The roles that belong to the role.
*/
public function users()
{
return $this->belongsToMany(User::class)->orderBy('name', 'asc');
2015-08-29 10:03:42 -04:00
}
/**
* Get all related JointPermissions.
* @return \Illuminate\Database\Eloquent\Relations\HasMany
*/
public function jointPermissions()
{
return $this->hasMany(JointPermission::class);
}
2015-08-29 10:03:42 -04:00
/**
* The RolePermissions that belong to the role.
2015-08-29 10:03:42 -04:00
*/
public function permissions()
{
return $this->belongsToMany(RolePermission::class, 'permission_role', 'role_id', 'permission_id');
2015-08-29 10:03:42 -04:00
}
/**
* Check if this role has a permission.
* @param $permissionName
* @return bool
*/
public function hasPermission($permissionName)
{
$permissions = $this->getRelationValue('permissions');
foreach ($permissions as $permission) {
if ($permission->getRawAttribute('name') === $permissionName) {
return true;
}
}
return false;
}
2015-08-29 10:03:42 -04:00
/**
* Add a permission to this role.
* @param RolePermission $permission
2015-08-29 10:03:42 -04:00
*/
public function attachPermission(RolePermission $permission)
2015-08-29 10:03:42 -04:00
{
$this->permissions()->attach($permission->id);
}
/**
* Detach a single permission from this role.
* @param RolePermission $permission
*/
public function detachPermission(RolePermission $permission)
{
$this->permissions()->detach($permission->id);
}
/**
* Get the role object for the specified role.
* @param $roleName
* @return Role
*/
public static function getRole($roleName)
{
return static::query()->where('name', '=', $roleName)->first();
2015-09-05 12:42:05 -04:00
}
/**
* Get the role object for the specified system role.
* @param $roleName
* @return Role
*/
public static function getSystemRole($roleName)
{
return static::query()->where('system_name', '=', $roleName)->first();
}
/**
* Get all visible roles
* @return mixed
*/
public static function visible()
{
return static::query()->where('hidden', '=', false)->orderBy('name')->get();
}
/**
* Get the roles that can be restricted.
* @return \Illuminate\Database\Eloquent\Builder[]|\Illuminate\Database\Eloquent\Collection
*/
public static function restrictable()
{
return static::query()->where('system_name', '!=', 'admin')->get();
}
2015-08-29 10:03:42 -04:00
}