Miguel N
1c0eeb4bb0
Gate Auth arguments were missing for TeamFile and Team controllers. This means that Gate has no idea where to look for policies, meaning that the ability passed is perceived literally, causing an Unauthorized error. Adding the Model with which to authorize the request solved the error since Gate now knows which policy to look in for permission logic.
248 lines
8.2 KiB
PHP
Executable File
248 lines
8.2 KiB
PHP
Executable File
<?php
|
|
|
|
/*
|
|
* Copyright © 2020 Miguel Nogueira
|
|
*
|
|
* This file is part of Raspberry Staff Manager.
|
|
*
|
|
* Raspberry Staff Manager is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Raspberry Staff Manager is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with Raspberry Staff Manager. If not, see <https://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Http\Requests\EditTeamRequest;
|
|
use App\Http\Requests\NewTeamRequest;
|
|
use App\Http\Requests\SendInviteRequest;
|
|
use App\Mail\InviteToTeam;
|
|
use App\Team;
|
|
use App\User;
|
|
use App\Vacancy;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Auth;
|
|
use Illuminate\Support\Facades\Mail;
|
|
use Mpociot\Teamwork\Exceptions\UserNotInTeamException;
|
|
use Mpociot\Teamwork\Facades\Teamwork;
|
|
use Mpociot\Teamwork\TeamInvite;
|
|
|
|
class TeamController extends Controller
|
|
{
|
|
/**
|
|
* Display a listing of the resource.
|
|
*
|
|
* @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\View\Factory|\Illuminate\Contracts\View\View|\Illuminate\Http\Response
|
|
*/
|
|
public function index()
|
|
{
|
|
$this->authorize('index', Team::class);
|
|
|
|
$teams = Team::with('users.roles')->get();
|
|
|
|
return view('dashboard.teams.teams')
|
|
->with('teams', $teams);
|
|
}
|
|
|
|
/**
|
|
* Store a newly created resource in storage.
|
|
*
|
|
* @param NewTeamRequest $request
|
|
* @return \Illuminate\Http\RedirectResponse
|
|
* @throws \Illuminate\Auth\Access\AuthorizationException
|
|
*/
|
|
public function store(NewTeamRequest $request)
|
|
{
|
|
$this->authorize('create', Team::class);
|
|
|
|
$team = Team::create([
|
|
'name' => $request->teamName,
|
|
'owner_id' => Auth::user()->id,
|
|
]);
|
|
|
|
Auth::user()->teams()->attach($team->id);
|
|
|
|
$request->session()->flash('success', 'Team successfully created.');
|
|
|
|
return redirect()->back();
|
|
}
|
|
|
|
/**
|
|
* Show the form for editing the specified resource.
|
|
*
|
|
* @param Team $team
|
|
* @return \Illuminate\Contracts\Foundation\Application|\Illuminate\Contracts\View\Factory|\Illuminate\Contracts\View\View|\Illuminate\Http\Response
|
|
* @throws \Illuminate\Auth\Access\AuthorizationException
|
|
*/
|
|
public function edit(Team $team)
|
|
{
|
|
$this->authorize('update', $team);
|
|
return view('dashboard.teams.edit-team')
|
|
->with([
|
|
'team' => $team,
|
|
'users' => User::all(),
|
|
'vacancies' => Vacancy::with('teams')->get()->all()
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Update the specified resource in storage.
|
|
*
|
|
* @param EditTeamRequest $request
|
|
* @param Team $team
|
|
* @return \Illuminate\Http\Response
|
|
* @throws \Illuminate\Auth\Access\AuthorizationException
|
|
*/
|
|
public function update(EditTeamRequest $request, Team $team): \Illuminate\Http\Response
|
|
{
|
|
$this->authorize('update', $team);
|
|
|
|
|
|
$team->description = $request->teamDescription;
|
|
$team->openJoin = $request->joinType;
|
|
|
|
$team->save();
|
|
|
|
$request->session()->flash('success', 'Team edited successfully.');
|
|
|
|
return redirect()->to(route('teams.index'));
|
|
}
|
|
|
|
/**
|
|
* Remove the specified resource from storage.
|
|
*
|
|
* @param int $id
|
|
* @return \Illuminate\Http\Response
|
|
*/
|
|
public function destroy($id)
|
|
{
|
|
// wip
|
|
}
|
|
|
|
public function invite(SendInviteRequest $request, Team $team): \Illuminate\Http\RedirectResponse
|
|
{
|
|
$this->authorize('invite', $team);
|
|
|
|
$user = User::findOrFail($request->user);
|
|
|
|
if (! $team->openJoin) {
|
|
if (! Teamwork::hasPendingInvite($user->email, $team)) {
|
|
Teamwork::inviteToTeam($user, $team, function (TeamInvite $invite) use ($user) {
|
|
Mail::to($user)->send(new InviteToTeam($invite));
|
|
});
|
|
|
|
$request->session()->flash('success', 'Invite sent! They can now accept or deny it.');
|
|
} else {
|
|
$request->session()->flash('error', 'This user has already been invited.');
|
|
}
|
|
} else {
|
|
$request->session()->flash('error', 'You can\'t invite users to public teams.');
|
|
}
|
|
|
|
return redirect()->back();
|
|
}
|
|
|
|
public function processInviteAction(Request $request, $action, $token): \Illuminate\Http\RedirectResponse
|
|
{
|
|
switch ($action) {
|
|
case 'accept':
|
|
|
|
$invite = Teamwork::getInviteFromAcceptToken($token);
|
|
|
|
if ($invite && $invite->user->is(Auth::user())) {
|
|
Teamwork::acceptInvite($invite);
|
|
$request->session()->flash('success', 'Invite accepted! You have now joined '.$invite->team->name.'.');
|
|
} else {
|
|
$request->session()->flash('error', 'Invalid or expired invite URL.');
|
|
}
|
|
|
|
break;
|
|
|
|
case 'deny':
|
|
|
|
$invite = Teamwork::getInviteFromDenyToken($token);
|
|
|
|
if ($invite && $invite->user->is(Auth::user())) {
|
|
Teamwork::denyInvite($invite);
|
|
$request->session()->flash('success', 'Invite denied! Ask for another invite if this isn\'t what you meant.');
|
|
} else {
|
|
$request->session()->flash('error', 'Invalid or expired invite URL.');
|
|
}
|
|
|
|
break;
|
|
|
|
default:
|
|
$request->session()->flash('error', 'Sorry, but the invite URL you followed was malformed. Try asking for another invite, or submit a bug report.');
|
|
|
|
}
|
|
|
|
// This page will show the user's current teams
|
|
return redirect()->to(route('teams.index'));
|
|
}
|
|
|
|
public function switchTeam(Request $request, Team $team): \Illuminate\Http\RedirectResponse
|
|
{
|
|
$this->authorize('switchTeam', $team);
|
|
|
|
try {
|
|
Auth::user()->switchTeam($team);
|
|
|
|
$request->session()->flash('success', 'Switched teams! Your team dashboard will now use this context.');
|
|
} catch (UserNotInTeamException $ex) {
|
|
$request->session()->flash('error', 'You can\'t switch to a team you don\'t belong to.');
|
|
}
|
|
|
|
return redirect()->back();
|
|
}
|
|
|
|
// Since it's a separate form, we shouldn't use the same update method
|
|
public function assignVacancies(Request $request, Team $team): \Illuminate\Http\RedirectResponse
|
|
{
|
|
$this->authorize('update', $team);
|
|
|
|
// P.S. To future developers
|
|
// This method gave me a lot of trouble lol. It's hard to write code when you're half asleep.
|
|
// There may be an n+1 query in the view and I don't think there's a way to avoid that without writing a lot of extra code.
|
|
|
|
$requestVacancies = $request->assocVacancies;
|
|
$currentVacancies = $team->vacancies->pluck('id')->all();
|
|
|
|
if (is_null($requestVacancies)) {
|
|
foreach ($team->vacancies as $vacancy) {
|
|
$team->vacancies()->detach($vacancy->id);
|
|
}
|
|
|
|
$request->session()->flash('success', 'Removed all vacancy associations.');
|
|
|
|
return redirect()->back();
|
|
}
|
|
|
|
$vacancyDiff = array_diff($requestVacancies, $currentVacancies);
|
|
$deselectedDiff = array_diff($currentVacancies, $requestVacancies);
|
|
|
|
if (! empty($vacancyDiff) || ! empty($deselectedDiff)) {
|
|
foreach ($vacancyDiff as $selectedVacancy) {
|
|
$team->vacancies()->attach($selectedVacancy);
|
|
}
|
|
|
|
foreach ($deselectedDiff as $deselectedVacancy) {
|
|
$team->vacancies()->detach($deselectedVacancy);
|
|
}
|
|
} else {
|
|
$team->vacancies()->attach($requestVacancies);
|
|
}
|
|
|
|
$request->session()->flash('success', 'Assignments changed successfully.');
|
|
|
|
return redirect()->back();
|
|
}
|
|
}
|