31 lines
980 B
PHP
31 lines
980 B
PHP
<?php
|
|
|
|
namespace App\Policies;
|
|
|
|
use App\Enums\PurchasingRole;
|
|
use App\Models\Supplier;
|
|
use App\Models\User;
|
|
|
|
class SupplierPolicy
|
|
{
|
|
public function viewAny(User $user): bool
|
|
{
|
|
return $user->tenant_id !== null && in_array($user->purchasing_role, [PurchasingRole::Admin, PurchasingRole::Procurement, PurchasingRole::Finance, PurchasingRole::DepartmentHead]);
|
|
}
|
|
|
|
public function view(User $user, Supplier $supplier): bool
|
|
{
|
|
return $this->viewAny($user) && $user->tenant_id === $supplier->tenant_id;
|
|
}
|
|
|
|
public function update(User $user, Supplier $supplier): bool
|
|
{
|
|
return $user->purchasing_role === PurchasingRole::Procurement && $user->tenant_id === $supplier->tenant_id;
|
|
}
|
|
|
|
public function viewDocuments(User $user, Supplier $supplier): bool
|
|
{
|
|
return $this->view($user, $supplier) && in_array($user->purchasing_role, [PurchasingRole::Admin, PurchasingRole::Procurement, PurchasingRole::Finance]);
|
|
}
|
|
}
|