commit13

app/Http/Middleware/EnsureOrganizationAccess.php

@@ -2,6 +2,7 @@
 
 namespace App\Http\Middleware;
 
+use App\Models\User;
 use App\Services\OrganizationAccess;
 use App\Services\RequisitionWorkflow;
 use Closure;
@@ -12,14 +13,15 @@ class EnsureOrganizationAccess
 {
     public function handle(Request $request, Closure $next): Response
     {
-        $user = $request->user();
-        if ($user !== null && $user->tenant_id !== null) {
+        $user = $request->user('web');
+        if ($user instanceof User && $user->tenant_id !== null) {
             abort_unless(app(OrganizationAccess::class)->permissions($user) !== [], 403, 'Não existe uma atribuição de acesso válida. Contacte os administradores da empresa.');
-            abort_if(app(OrganizationAccess::class)->maintenanceOnly($user) && ! $request->isMethodSafe(), 403, 'A manutenção temporária tem acesso de diagnóstico e consulta.');
+            $contextSelection = $request->isMethod('POST') && $request->routeIs('work-context.select');
+            abort_if(app(OrganizationAccess::class)->maintenanceOnly($user) && ! $request->isMethodSafe() && ! $contextSelection, 403, 'A manutenção temporária tem acesso de diagnóstico e consulta.');
         }
 
         $response = $next($request);
-        if ($user !== null && app(OrganizationAccess::class)->maintenanceOnly($user)) {
+        if ($user instanceof User && app(OrganizationAccess::class)->maintenanceOnly($user)) {
             app(RequisitionWorkflow::class)->audit($user, 'maintenance.consulted', null, null, ['path' => $request->path(), 'status' => $response->getStatusCode()]);
         }
 

app/Http/Middleware/EnsureWorkContext.php

@@ -0,0 +1,28 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Models\User;
+use App\Services\WorkContext;
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class EnsureWorkContext
+{
+    public function handle(Request $request, Closure $next): Response
+    {
+        $contexts = app(WorkContext::class);
+        $user = $request->user('web');
+        if ($user instanceof User && $contexts->enforced($user) && ($area = WorkContext::area($request->path())) !== null) {
+            $key = $contexts->active($request);
+            abort_unless($key !== null && WorkContext::OPTIONS[$key]['area'] === $area, 403, 'Seleccione uma área e opção autorizadas no Painel Inicial.');
+            if (! WorkContext::OPTIONS[$key]['operational'] && $request->isMethod('GET')) {
+                return redirect('/dashboard');
+            }
+            abort_unless(WorkContext::OPTIONS[$key]['operational'], 409, 'O percurso operacional desta opção ainda está em implementação.');
+        }
+
+        return $next($request);
+    }
+}

app/Http/Middleware/HandleInertiaRequests.php

@@ -5,7 +5,9 @@ namespace App\Http\Middleware;
 use App\Models\User;
 use App\Services\OrganizationAccess;
 use App\Services\SupplierPayables;
+use App\Services\WorkContext;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Schema;
 use Inertia\Middleware;
 
 class HandleInertiaRequests extends Middleware
@@ -49,6 +51,8 @@ class HandleInertiaRequests extends Middleware
         return [
             ...parent::share($request),
             'name' => config('app.name'),
+            'internalRequisitionReady' => $actor !== null && Schema::hasTable('requisition_commands'),
+            'workContext' => $actor === null ? null : app(WorkContext::class)->shared($request),
             'canRequest' => $actor !== null && app(OrganizationAccess::class)->canRequest($actor),
             'auth' => [
                 'user' => $actor,