permissions chunked into separate files

spira · Dec 16, 2015 · 475ae18 · 475ae18
1 parent d0b5f87
commit 475ae18
Show file tree

Hide file tree

Showing 7 changed files with 322 additions and 192 deletions.
diff --git a/api/composer.lock b/api/composer.lock
diff --git a/api/config/permissions.php b/api/config/permissions.php
@@ -8,164 +8,12 @@
  * For the full copyright and license information, please view the LICENSE file that was distributed with this source code.
  */
 
-namespace App\Http\Controllers;
+use Spira\Core\Helpers\Arr;
 
-use App\Models\Role;
-use App\Http\Auth\ReAssignNonAdmin;
-use App\Http\Auth\ManipulateWithOwn;
-use App\Http\Auth\ImpersonateNonAdmin;
-use App\Http\Auth\ManipulateWithOwnChild;
+$resultArray = [];
+foreach (glob(__DIR__.'/permissions/*.php') as $item) {
+    $array = require $item;
+    $resultArray = Arr::merge($resultArray, $array);
+}
 
-return [
-
-    //basic route based permissions
-    UserController::class.'@getOne' => [
-        'type' => 'permission',
-        'description' => 'Get single user record by id',
-    ],
-    UserController::class.'@getAllPaginated' => [
-        'type' => 'permission',
-        'description' => 'Get all users',
-    ],
-    UserController::class.'@patchOne' => [
-        'type' => 'permission',
-        'description' => 'Update user record by id',
-    ],
-    UserController::class.'@deleteOne' => [
-        'type' => 'permission',
-        'description' => 'Delete user by id',
-    ],
-    UserProfileController::class.'@getOne' => [
-        'type' => 'permission',
-        'description' => 'Get user profile record by id',
-    ],
-    UserProfileController::class.'@putOne' => [
-        'type' => 'permission',
-        'description' => 'Update/Add user profile record by id',
-    ],
-    UserProfileController::class.'@patchOne' => [
-        'type' => 'permission',
-        'description' => 'Update user profile record by id',
-    ],
-    PermissionsController::class.'@getAll' => [
-        'type' => 'permission',
-        'description' => 'Get all roles assigned to user',
-    ],
-    PermissionsController::class.'@putMany' => [
-        'type' => 'permission',
-        'description' => 'Reassign user roles',
-    ],
-    ArticleUserRatingsController::class.'@putOne' => [
-        'type' => 'permission',
-        'description' => 'Rate article or change rating value',
-    ],
-    ArticleBookmarksController::class.'@putOne' => [
-        'type' => 'permission',
-        'description' => 'Add to bookmarks',
-    ],
-    ArticleUserRatingsController::class.'@deleteOne' => [
-        'type' => 'permission',
-        'description' => 'Remove article rating',
-    ],
-    ArticleBookmarksController::class.'@deleteOne' => [
-        'type' => 'permission',
-        'description' => 'Remove from bookmarks',
-    ],
-    AuthController::class.'@loginAsUser' =>  [
-        'type' => 'permission',
-        'description' => 'Permission to allow a user to log in as another user',
-    ],
-
-    //special permissions (hierarchy or rules)
-    'ReAssignAllRoles' =>  [
-        'type' => 'permission',
-        'description' => 'Permission to allow a user to assign and detach any role',
-        'children' => [
-            PermissionsController::class.'@putMany',
-        ],
-    ],
-    'ReAssignNonAdmin' =>  [
-        'type' => 'permission',
-        'description' => 'Permission to allow a user to assign and detach non-admin roles only',
-        'ruleName' => ReAssignNonAdmin::class,
-        'children' => [
-            PermissionsController::class.'@putMany',
-        ],
-    ],
-    'ImpersonateAllUsers' =>  [
-        'type' => 'permission',
-        'description' => 'Permission to allow a user to log in as any other user',
-        'children' => [
-            AuthController::class.'@loginAsUser',
-        ],
-    ],
-    'ImpersonateNonAdmin' =>  [
-        'type' => 'permission',
-        'description' => 'Permission to allow a user to log in as non-admin users',
-        'ruleName' => ImpersonateNonAdmin::class,
-        'children' => [
-            AuthController::class.'@loginAsUser',
-        ],
-    ],
-    'ManipulateWithOwn' => [
-        'type' => 'permission',
-        'description' => 'General permission to update record which belongs to the user',
-        'ruleName' => ManipulateWithOwn::class,
-        'children' => [
-            UserController::class.'@getOne',
-            UserController::class.'@patchOne',
-            UserProfileController::class.'@getOne',
-            UserProfileController::class.'@patchOne',
-            UserProfileController::class.'@putOne',
-            PermissionsController::class.'@getAll',
-        ],
-    ],
-    'ManipulateWithOwnChild' => [
-        'type' => 'permission',
-        'description' => 'General permission to update record which belongs to the user',
-        'ruleName' => ManipulateWithOwnChild::class,
-        'children' => [
-            ArticleUserRatingsController::class.'@putOne',
-            ArticleBookmarksController::class.'@putOne',
-            ArticleUserRatingsController::class.'@deleteOne',
-            ArticleBookmarksController::class.'@deleteOne',
-        ],
-    ],
-
-    //roles
-    Role::SUPER_ADMIN_ROLE => [
-        'type' => 'role',
-        'description' => 'Super Admin role, can do all actions',
-        'children' => [
-            Role::ADMIN_ROLE,
-            'ImpersonateAllUsers',
-            'ReAssignAllRoles',
-        ],
-    ],
-    Role::ADMIN_ROLE => [
-        'type' => 'role',
-        'description' => 'Admin role',
-        'children' => [
-            UserController::class.'@getOne',
-            UserController::class.'@getAllPaginated',
-            UserController::class.'@patchOne',
-            UserController::class.'@deleteOne',
-            UserProfileController::class.'@getOne',
-            PermissionsController::class.'@getAll',
-            'ImpersonateNonAdmin',
-            'ReAssignNonAdmin',
-            Role::USER_ROLE,
-        ],
-    ],
-    Role::USER_ROLE => [
-        'type' => 'role',
-        'children' => [
-            'ManipulateWithOwn',
-            'ManipulateWithOwnChild',
-        ],
-    ],
-    'testrole' => [
-        'type' => 'role',
-        'description' => 'Simple test role',
-    ],
-];
+return $resultArray;