Use joint_permissions to determine is a user has an available page or chapter to copy.

This commit is contained in:
Mark James 2019-01-02 16:55:28 +11:00
parent 99c6d70c51
commit 19770d2792
3 changed files with 40 additions and 2 deletions

View File

@ -556,6 +556,33 @@ class PermissionService
return $q;
}
/**
* Checks if a user has a book or chapter available to create a page
* @param Ownable $ownable
* @param $permission
* @return bool
*/
public function checkAvailableCreatePageAccess()
{
$userRoleIds = $this->currentUser()->roles()->pluck('id')->toArray();
$userId = $this->currentUser()->id;
$canCreatePage = $this->db->table('joint_permissions')
->where('action', '=', 'page-create')
->whereIn('role_id', $userRoleIds)
->where(function ($query) use ($userId) {
$query->where('has_permission', '=', 1)
->orWhere(function ($query2) use ($userId) {
$query2->where('has_permission_own', '=', 1)
->where('created_by', '=', $userId);
});
})
->get()->count() > 0;
return $canCreatePage;
}
/**
* Check if an entity has restrictions set on itself or its
* parent tree.

View File

@ -65,6 +65,17 @@ function userCan($permission, Ownable $ownable = null)
return $permissionService->checkOwnableUserAccess($ownable, $permission);
}
/**
* Check if the current user has the ability to create a page for an existing object
* @return bool
*/
function userCanCreatePage()
{
// Check for create page permissions
$permissionService = app(\BookStack\Auth\Permissions\PermissionService::class);
return $permissionService->checkAvailableCreatePageAccess();
}
/**
* Helper to access system settings.
* @param $key

View File

@ -17,11 +17,11 @@
@if(userCan('page-update', $page))
<a href="{{ $page->getUrl('/edit') }}" class="text-primary text-button" >@icon('edit'){{ trans('common.edit') }}</a>
@endif
@if(userCan('page-create-own') || userCan('page-create-all') || userCan('page-update', $page) || userCan('restrictions-manage', $page) || userCan('page-delete', $page))
@if((userCan('page-view', $page) && userCanCreatePage()) || userCan('page-update', $page) || userCan('restrictions-manage', $page) || userCan('page-delete', $page))
<div dropdown class="dropdown-container">
<a dropdown-toggle class="text-primary text-button">@icon('more') {{ trans('common.more') }}</a>
<ul>
@if(userCan('page-create-own') || userCan('page-create-all'))
@if(userCanCreatePage())
<li><a href="{{ $page->getUrl('/copy') }}" class="text-primary" >@icon('copy'){{ trans('common.copy') }}</a></li>
@endif
@if(userCan('page-update', $page))