oportunidades 7

app/Http/Middleware/AuditProfileDecision.php

@@ -14,7 +14,7 @@ class AuditProfileDecision
     public function handle(Request $request, Closure $next): Response
     {
         $access = app(PortalProfileAccess::class);
-        if (! $request->user() || ! $access->available() || ! preg_match('#^(perfil/|perfis/|minhas-oportunidades)#', $request->path())) {
+        if (! $request->user() || ! $access->governanceAvailable() || ! preg_match('#^(perfil/|perfis/|minhas-oportunidades)#', $request->path())) {
             return $next($request);
         }
         try {

app/Http/Middleware/EnsurePortalProfileAdministration.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Services\PortalProfileAccess;
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class EnsurePortalProfileAdministration
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        abort_unless(config('portal.profile_administration_enabled') || config('portal.profile_access_enabled'), 404);
+        abort_unless(app(PortalProfileAccess::class)->governanceAvailable(), 503, 'Autorização por perfis ainda não instalada.');
+
+        return $next($request);
+    }
+}

app/Http/Middleware/PortalProfileSession.php

@@ -14,8 +14,8 @@ class PortalProfileSession
     public function handle(Request $request, Closure $next): Response
     {
         $access = app(PortalProfileAccess::class);
-        $available = $access->available();
-        if ($request->user() && config('portal.profile_access_enabled') && ! $available) {
+        $available = $access->governanceAvailable();
+        if ($request->user() && (config('portal.profile_access_enabled') || config('portal.profile_administration_enabled')) && ! $available) {
             $recovery = $request->is('management/profile-install', 'management/profile-install/bootstrap')
                 || ($request->is('logout') && $request->isMethod('POST'));
             abort_if(! in_array($request->method(), ['GET', 'HEAD', 'OPTIONS'], true) && ! $recovery, 503,

app/Http/Middleware/ProtectPrivilegedIdentity.php

@@ -14,7 +14,7 @@ class ProtectPrivilegedIdentity
     {
         $actor = $request->user();
         $access = app(PortalProfileAccess::class);
-        if (! $actor || ! $access->available()) {
+        if (! $actor || ! $access->governanceAvailable()) {
             return $next($request);
         }
         if (! in_array($request->method(), ['GET', 'HEAD', 'OPTIONS'], true) && $access->has($actor, 'auditor')