Limit teamowners to only be able to give permissions at or beneath th…

…eir own
mikebronner · Jun 11, 2019 · 92a1c35 · 92a1c35
1 parent 43ac267
commit 92a1c35
Show file tree

Hide file tree

Showing 5 changed files with 90 additions and 11 deletions.
diff --git a/dist/js/tool.js b/dist/js/tool.js
diff --git a/dist/mix-manifest.json b/dist/mix-manifest.json
@@ -1,5 +1,5 @@
 {
-    "/js/tool.js": "/js/tool.js?id=3116c8e27a9dcdbcf858",
+    "/js/tool.js": "/js/tool.js?id=8bb7882418fee4ece035",
     "/css/tool.css": "/css/tool.css?id=d41d8cd98f00b204e980",
     "/css/vue-multiselect.min.css": "/css/vue-multiselect.min.css?id=fbccbb35c9587cb838a3"
 }
diff --git a/resources/js/components/PermissionsTool.vue b/resources/js/components/PermissionsTool.vue
@@ -14,23 +14,67 @@ export default {
             ],
             permissions: [],
             permissionsIsLoading: true,
-            selectOptions: [
+            anySelectOptions: [
                 "own",
                 "any",
                 "no",
             ],
+            ownSelectOptions: [
+                "own",
+                "no",
+            ],
+            noSelectOptions: [
+                "no",
+            ],
         };
     },
 
     created: function () {
-        this.loadPermissions();
+        this.loadTeamOwnerPermissions();
     },
 
     mounted: function () {
         //
     },
 
     methods: {
+        getOptionsFor: function (action, entity) {
+            var effectivePermission = _.filter(this.ownerPermissions, function (permission) {
+                return permission.action_name == action
+                    && permission.entity_name == entity;
+            })[0];
+
+            if (((effectivePermission || {}).ownership_name || "") == "any") {
+                if (effectivePermission.action_name == "create"
+                    || effectivePermission.action_name == "viewAny"
+                ) {
+                    return this.binarySelectOptions;
+                }
+
+                return this.anySelectOptions;
+            }
+
+            if (((effectivePermission || {}).ownership_name || "") == "own") {
+                return this.ownSelectOptions;
+            }
+
+            return this.noSelectOptions;
+        },
+
+        loadTeamOwnerPermissions: function () {
+            var self = this;
+
+            Nova.request()
+                .get("/genealabs/laravel-governor/nova/permissions?owner=yes&filter=team_id&value=" + this.resourceId)
+                .then(function (response) {
+                    self.ownerPermissions = Object.assign({}, response.data);
+                    self.loadPermissions();
+                })
+                .catch(function (error) {
+                    console.error(error.response);
+                });
+        },
+
         loadPermissions: function () {
             var self = this;
 
@@ -135,7 +179,7 @@ export default {
                                     <td>
                                         <multiselect
                                             v-model="permissions[groupName][name]['create']"
-                                            :options="binarySelectOptions"
+                                            :options="getOptionsFor('create', name)"
                                             select-label=""
                                             deselect-label=""
                                             selected-label=""
@@ -148,7 +192,7 @@ export default {
                                     <td>
                                         <multiselect
                                             v-model="permissions[groupName][name]['viewAny']"
-                                            :options="selectOptions"
+                                            :options="getOptionsFor('viewAny', name)"
                                             select-label=""
                                             deselect-label=""
                                             selected-label=""
@@ -161,7 +205,7 @@ export default {
                                     <td>
                                         <multiselect
                                             v-model="permissions[groupName][name]['view']"
-                                            :options="selectOptions"
+                                            :options="getOptionsFor('view', name)"
                                             select-label=""
                                             deselect-label=""
                                             selected-label=""
@@ -174,7 +218,7 @@ export default {
                                     <td>
                                         <multiselect
                                             v-model="permissions[groupName][name]['update']"
-                                            :options="selectOptions"
+                                            :options="getOptionsFor('update', name)"
                                             select-label=""
                                             deselect-label=""
                                             selected-label=""
@@ -187,7 +231,7 @@ export default {
                                     <td>
                                         <multiselect
                                             v-model="permissions[groupName][name]['delete']"
-                                            :options="selectOptions"
+                                            :options="getOptionsFor('delete', name)"
                                             select-label=""
                                             deselect-label=""
                                             selected-label=""
@@ -200,7 +244,7 @@ export default {
                                     <td>
                                         <multiselect
                                             v-model="permissions[groupName][name]['restore']"
-                                            :options="selectOptions"
+                                            :options="getOptionsFor('restore', name)"
                                             select-label=""
                                             deselect-label=""
                                             selected-label=""
@@ -213,7 +257,7 @@ export default {
                                     <td>
                                         <multiselect
                                             v-model="permissions[groupName][name]['forceDelete']"
-                                            :options="selectOptions"
+                                            :options="getOptionsFor('forceDelete', name)"
                                             select-label=""
                                             deselect-label=""
                                             selected-label=""

diff --git a/src/Http/Controllers/Nova/PermissionController.php b/src/Http/Controllers/Nova/PermissionController.php
@@ -26,6 +26,14 @@ public function index() : array
                 }
             })
             ->first();
+
+        if (request("owner") === "yes") {
+            return $permissible
+                ->ownedBy
+                ->effectivePermissions
+                ->toArray();
+        }
+
         $gate = app('Illuminate\Contracts\Auth\Access\Gate');
         $reflectedGate = new \ReflectionObject($gate);
         $policies = $reflectedGate->getProperty("policies");

diff --git a/src/Traits/Governing.php b/src/Traits/Governing.php
@@ -61,4 +61,31 @@ public function getPermissionsAttribute() : Collection
 
         return (new $permissionClass)->whereIn('role_name', $roleNames)->get();
     }
+
+    public function getEffectivePermissionsAttribute() : Collection
+    {
+        $results = collect();
+        $groupedPermissions = $this->permissions
+            ->groupBy(function ($permission) {
+                return $permission->entity_name . "|" . $permission->action_name;
+            });
+
+        foreach ($groupedPermissions as $entityAction => $permissions) {
+            $permission = $permissions->first();
+            $permission->role_name = null;
+            $permission->team_name = null;
+
+            if ($permissions->pluck("ownership_name")->contains("any")) {
+                $permission->ownership_name = "any";
+                $results = $results->push($permission);
+            }
+
+            if ($permissions->pluck("ownership_name")->contains("own")) {
+                $permission->ownership_name = "any";
+                $results = $results->push($permission);
+            }
+        }
+
+        return $results;
+    }
 }