add global promotion deadline + fix grane medal

app/Console/Commands/Test.php

@@ -78,7 +78,7 @@ class Test extends Command
      */
     public function handle()
     {
-       $r = \Composer\InstalledVersions::getPrettyVersion('filament/filament');
+       $r = NexusDB::cache_get('ssbb');
        dd($r);
     }
 

app/Filament/Resources/System/ExamResource/Pages/CreateExam.php

@@ -17,7 +17,7 @@ class CreateExam extends CreateRecord
 //        dd($data);
         $examRep = new ExamRepository();
         try {
-            $examRep->store($data);
+            $this->record = $examRep->store($data);
             $this->notify('success', $this->getCreatedNotificationMessage());
             if ($another) {
                 // Ensure that the form record is anonymized so that relationships aren't loaded.

app/Filament/Resources/System/ExamResource/Pages/EditExam.php

@@ -23,7 +23,7 @@ class EditExam extends EditRecord
         $data = $this->form->getState();
         $examRep = new ExamRepository();
         try {
-            $examRep->update($data, $this->record->id);
+            $this->record = $examRep->update($data, $this->record->id);
             $this->notify('success', $this->getSavedNotificationMessage());
             $this->redirect($this->getResource()::getUrl('index'));
         } catch (\Exception $exception) {

app/Filament/Resources/System/MedalResource/Pages/CreateMedal.php

@@ -9,4 +9,9 @@ use Filament\Resources\Pages\CreateRecord;
 class CreateMedal extends CreateRecord
 {
     protected static string $resource = MedalResource::class;
+
+    protected function getRedirectUrl(): string
+    {
+        return $this->getResource()::getUrl('index');
+    }
 }

app/Filament/Resources/System/TorrentStateResource.php

@@ -0,0 +1,81 @@
+<?php
+
+namespace App\Filament\Resources\System;
+
+use App\Filament\Resources\System\TorrentStateResource\Pages;
+use App\Filament\Resources\System\TorrentStateResource\RelationManagers;
+use App\Models\Torrent;
+use App\Models\TorrentState;
+use Filament\Forms;
+use Filament\Resources\Form;
+use Filament\Resources\Resource;
+use Filament\Resources\Table;
+use Filament\Tables;
+use Illuminate\Database\Eloquent\Builder;
+use Illuminate\Database\Eloquent\SoftDeletingScope;
+use Nexus\Database\NexusDB;
+
+class TorrentStateResource extends Resource
+{
+    protected static ?string $model = TorrentState::class;
+
+    protected static ?string $navigationIcon = 'heroicon-o-speakerphone';
+
+    protected static ?string $navigationGroup = 'System';
+
+    protected static ?int $navigationSort = 99;
+
+    protected static function getNavigationLabel(): string
+    {
+        return __('admin.sidebar.torrent_state');
+    }
+
+    public static function getBreadcrumb(): string
+    {
+        return self::getNavigationLabel();
+    }
+
+    public static function form(Form $form): Form
+    {
+        return $form
+            ->schema([
+                Forms\Components\Select::make('global_sp_state')
+                    ->options(Torrent::listPromotionTypes(true))
+                    ->label(__('label.torrent_state.global_sp_state'))
+                    ->required(),
+                Forms\Components\DateTimePicker::make('deadline')
+                    ->required()
+                    ->label(__('label.deadline')),
+            ])->columns(1);
+    }
+
+    public static function table(Table $table): Table
+    {
+        return $table
+            ->columns([
+                Tables\Columns\TextColumn::make('global_sp_state_text')->label(__('label.torrent_state.global_sp_state')),
+                Tables\Columns\TextColumn::make('deadline')->label(__('label.deadline')),
+            ])
+            ->filters([
+                //
+            ])
+            ->actions([
+                Tables\Actions\EditAction::make()->after(function () {
+                    do_log("cache_del: global_promotion_state");
+                    NexusDB::cache_del('global_promotion_state');
+                    NexusDB::cache_del('global_promotion_state_deadline');
+                }),
+//                Tables\Actions\DeleteAction::make(),
+            ])
+            ->bulkActions([
+//                Tables\Actions\DeleteBulkAction::make(),
+            ]);
+    }
+
+    public static function getPages(): array
+    {
+        return [
+            'index' => Pages\ManageTorrentStates::route('/'),
+        ];
+    }
+}

app/Filament/Resources/System/TorrentStateResource/Pages/ManageTorrentStates.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Filament\Resources\System\TorrentStateResource\Pages;
+
+use App\Filament\Resources\System\TorrentStateResource;
+use Filament\Pages\Actions;
+use Filament\Resources\Pages\ManageRecords;
+use Nexus\Database\NexusDB;
+
+class ManageTorrentStates extends ManageRecords
+{
+    protected static string $resource = TorrentStateResource::class;
+
+    protected function getActions(): array
+    {
+        return [
+//            Actions\CreateAction::make(),
+        ];
+    }
+
+    protected function isTablePaginationEnabled(): bool
+    {
+        return false;
+    }
+
+}

app/Filament/Resources/User/UserResource/Pages/UserProfile.php

@@ -6,6 +6,7 @@ use App\Filament\Resources\User\UserResource;
 use App\Models\Medal;
 use App\Models\User;
 use App\Repositories\ExamRepository;
+use App\Repositories\MedalRepository;
 use App\Repositories\UserRepository;
 use Filament\Resources\Pages\Concerns\HasRelationManagers;
 use Filament\Resources\Pages\Concerns\InteractsWithRecord;
@@ -36,7 +37,12 @@ class UserProfile extends Page
 
     public function mount($record)
     {
-        $this->updateRecord($record);
+        static::authorizeResourceAccess();
+
+        $this->record = $this->resolveRecord($record);
+
+        abort_unless(static::getResource()::canView($this->getRecord()), 403);
+
     }
 
     protected function getActions(): array
@@ -196,9 +202,9 @@ class UserProfile extends Page
 
             ])
             ->action(function ($data) {
-                $examRep = new ExamRepository();
+                $medalRep = new MedalRepository();
                 try {
-                    $examRep->assignToUser($this->record->id, $data['exam_id'], $data['begin'], $data['end']);
+                    $medalRep->grantToUser($this->record->id, $data['medal_id'], $data['duration']);
                     $this->notify('success', 'Success!');
                     $this->emitSelf(self::EVENT_RECORD_UPDATED, $this->record->id);
                 } catch (\Exception $exception) {

app/Models/TorrentState.php

@@ -5,7 +5,12 @@ namespace App\Models;
 
 class TorrentState extends NexusModel
 {
-    public $incrementing = false;
+    protected $fillable = ['global_sp_state', 'deadline'];
 
     protected $table = 'torrents_state';
+
+    public function getGlobalSpStateTextAttribute()
+    {
+        return Torrent::$promotionTypes[$this->global_sp_state]['text'] ?? '';
+    }
 }

app/Models/User.php

@@ -17,10 +17,11 @@ use Laravel\Sanctum\HasApiTokens;
 use Nexus\Database\NexusDB;
 use Filament\Models\Contracts\FilamentUser;
 use Filament\Models\Contracts\HasName;
+use Spatie\Permission\Traits\HasRoles;
 
 class User extends Authenticatable implements FilamentUser, HasName
 {
-    use HasFactory, Notifiable, HasApiTokens;
+    use HasFactory, Notifiable, HasApiTokens, HasRoles;
 
     public $timestamps = false;
 
@@ -476,7 +477,7 @@ class User extends Authenticatable implements FilamentUser, HasName
 
     public function canAccessAdmin(): bool
     {
-        $targetClass = self::CLASS_SYSOP;
+        $targetClass = Setting::get('authority.staffmem');
         if (!$this->class || $this->class < $targetClass) {
             do_log(sprintf('user: %s, no class or class < %s, can not access admin.', $this->id, $targetClass));
             return false;

app/Policies/AgentAllowPolicy.php

@@ -0,0 +1,102 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\AgentAllow;
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class AgentAllowPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\AgentAllow  $agentAllow
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, AgentAllow $agentAllow)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\AgentAllow  $agentAllow
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, AgentAllow $agentAllow)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\AgentAllow  $agentAllow
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, AgentAllow $agentAllow)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\AgentAllow  $agentAllow
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, AgentAllow $agentAllow)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\AgentAllow  $agentAllow
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, AgentAllow $agentAllow)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_SYSOP) {
+            return true;
+        }
+        return false;
+    }
+}

app/Policies/AgentDenyPolicy.php

@@ -0,0 +1,102 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\AgentDeny;
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class AgentDenyPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\AgentDeny  $agentDeny
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, AgentDeny $agentDeny)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\AgentDeny  $agentDeny
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, AgentDeny $agentDeny)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\AgentDeny  $agentDeny
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, AgentDeny $agentDeny)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\AgentDeny  $agentDeny
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, AgentDeny $agentDeny)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\AgentDeny  $agentDeny
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, AgentDeny $agentDeny)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_SYSOP) {
+            return true;
+        }
+        return false;
+    }
+}

app/Policies/BasePolicy.php

@@ -0,0 +1,20 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\User;
+
+class BasePolicy
+{
+    /**
+     * @param  \App\Models\User  $user
+     * @param  string  $ability
+     * @return void|bool
+     */
+    public function before(User $user, $ability)
+    {
+        if ($user->class >= User::CLASS_STAFF_LEADER) {
+            return true;
+        }
+    }
+}

app/Policies/ClaimPolicy.php

@@ -0,0 +1,102 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\Claim;
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class ClaimPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Claim  $claim
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, Claim $claim)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Claim  $claim
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, Claim $claim)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Claim  $claim
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, Claim $claim)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Claim  $claim
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, Claim $claim)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Claim  $claim
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, Claim $claim)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_SYSOP) {
+            return true;
+        }
+        return false;
+    }
+}

app/Policies/ExamPolicy.php

@@ -0,0 +1,102 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\Exam;
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class ExamPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Exam  $exam
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, Exam $exam)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Exam  $exam
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, Exam $exam)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Exam  $exam
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, Exam $exam)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Exam  $exam
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, Exam $exam)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Exam  $exam
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, Exam $exam)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_SYSOP) {
+            return true;
+        }
+        return false;
+    }
+}

app/Policies/ExamUserPolicy.php

@@ -0,0 +1,102 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\ExamUser;
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class ExamUserPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\ExamUser  $examUser
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, ExamUser $examUser)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\ExamUser  $examUser
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, ExamUser $examUser)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\ExamUser  $examUser
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, ExamUser $examUser)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\ExamUser  $examUser
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, ExamUser $examUser)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\ExamUser  $examUser
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, ExamUser $examUser)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_SYSOP) {
+            return true;
+        }
+        return false;
+    }
+}

app/Policies/HitAndRunPolicy.php

@@ -0,0 +1,102 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\HitAndRun;
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class HitAndRunPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\HitAndRun  $hitAndRun
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, HitAndRun $hitAndRun)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\HitAndRun  $hitAndRun
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, HitAndRun $hitAndRun)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\HitAndRun  $hitAndRun
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, HitAndRun $hitAndRun)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\HitAndRun  $hitAndRun
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, HitAndRun $hitAndRun)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\HitAndRun  $hitAndRun
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, HitAndRun $hitAndRun)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_SYSOP) {
+            return true;
+        }
+        return false;
+    }
+}

app/Policies/MedalPolicy.php

@@ -0,0 +1,102 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\Medal;
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class MedalPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Medal  $medal
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, Medal $medal)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Medal  $medal
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, Medal $medal)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Medal  $medal
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, Medal $medal)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Medal  $medal
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, Medal $medal)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Medal  $medal
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, Medal $medal)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_SYSOP) {
+            return true;
+        }
+        return false;
+    }
+}

app/Policies/SettingPolicy.php

@@ -0,0 +1,103 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\Setting;
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class SettingPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Setting  $setting
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, Setting $setting)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Setting  $setting
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, Setting $setting)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Setting  $setting
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, Setting $setting)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Setting  $setting
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, Setting $setting)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Setting  $setting
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, Setting $setting)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_SYSOP) {
+            return true;
+        }
+        return false;
+    }
+
+}

app/Policies/TagPolicy.php

@@ -0,0 +1,102 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\Tag;
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class TagPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Tag  $tag
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, Tag $tag)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Tag  $tag
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, Tag $tag)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Tag  $tag
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, Tag $tag)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Tag  $tag
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, Tag $tag)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Tag  $tag
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, Tag $tag)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_ADMINISTRATOR) {
+            return true;
+        }
+        return false;
+    }
+}

app/Policies/TorrentPolicy.php

@@ -0,0 +1,102 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\Torrent;
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class TorrentPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Torrent  $torrent
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, Torrent $torrent)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Torrent  $torrent
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, Torrent $torrent)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Torrent  $torrent
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, Torrent $torrent)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Torrent  $torrent
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, Torrent $torrent)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\Torrent  $torrent
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, Torrent $torrent)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_SYSOP) {
+            return true;
+        }
+        return false;
+    }
+}

app/Policies/TorrentStatePolicy.php

@@ -0,0 +1,95 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\TorrentState;
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class TorrentStatePolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\TorrentState  $torrentState
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, TorrentState $torrentState)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\TorrentState  $torrentState
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, TorrentState $torrentState)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\TorrentState  $torrentState
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, TorrentState $torrentState)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\TorrentState  $torrentState
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, TorrentState $torrentState)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\TorrentState  $torrentState
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, TorrentState $torrentState)
+    {
+        //
+    }
+}

app/Policies/UserMedalPolicy.php

@@ -0,0 +1,102 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\User;
+use App\Models\UserMedal;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class UserMedalPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\UserMedal  $userMedal
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, UserMedal $userMedal)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\UserMedal  $userMedal
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, UserMedal $userMedal)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\UserMedal  $userMedal
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, UserMedal $userMedal)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\UserMedal  $userMedal
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, UserMedal $userMedal)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\UserMedal  $userMedal
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, UserMedal $userMedal)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_SYSOP) {
+            return true;
+        }
+        return false;
+    }
+}

app/Policies/UserPolicy.php

@@ -0,0 +1,101 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\User;
+use Illuminate\Auth\Access\HandlesAuthorization;
+
+class UserPolicy extends BasePolicy
+{
+    use HandlesAuthorization;
+
+    /**
+     * Determine whether the user can view any models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function viewAny(User $user)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\User  $model
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function view(User $user, User $model)
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     *
+     * @param  \App\Models\User  $user
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function create(User $user)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\User  $model
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function update(User $user, User $model)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\User  $model
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function delete(User $user, User $model)
+    {
+        return $this->can($user);
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\User  $model
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function restore(User $user, User $model)
+    {
+        //
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     *
+     * @param  \App\Models\User  $user
+     * @param  \App\Models\User  $model
+     * @return \Illuminate\Auth\Access\Response|bool
+     */
+    public function forceDelete(User $user, User $model)
+    {
+        //
+    }
+
+    private function can(User $user)
+    {
+        if ($user->class >= User::CLASS_SYSOP) {
+            return true;
+        }
+        return false;
+    }
+}