separate route permission + token manage

This commit is contained in:
xiaomlove
2025-04-17 18:59:03 +07:00
parent 263901bc54
commit 432c57f886
27 changed files with 203 additions and 54 deletions
+9 -1
View File
@@ -2,8 +2,10 @@
namespace App\Policies;
use App\Auth\Permission;
use App\Models\User;
use Illuminate\Auth\Access\HandlesAuthorization;
use Illuminate\Auth\Access\Response;
class UserPolicy extends BasePolicy
{
@@ -29,7 +31,13 @@ class UserPolicy extends BasePolicy
*/
public function view(User $user, User $model)
{
return true;
return $model->privacy != "strong" || $user->id == $model->id|| Permission::canManageUserBasicInfo();
}
public function viewEmail(User $user, User $model)
{
do_log(sprintf("user: %s, model: %s", $user->id, $model->id));
return $model->privacy == "low" || $user->id == $model->id || Permission::canViewUserConfidentialInfo();
}
/**