ONE PIECE HACKING

Ngiler SH3LL 360
: / home / tbf / cursbackend / app / Policies /

Information Server
MySQL : OFF Perl : OFF CURL : ON WGET : OFF PKEXEC : OFF

Directive	Local Value
IP Address	89.40.16.97
System	Linux server.atelieruldeit.ro 3.10.0-1160.el7.x86_64 #1 SMP Mon Oct 19 16:18:59 UTC 2020 x86_64
User	tbf
PHP Version	7.3.33
Software	Apache
Doc root	Writable

Edit File : UserPolicy.php \| Size : 3.54 KB
<?php namespace App\Policies; use App\Models\User; use App\Models\KeyResult; use App\Models\Objective; use App\Models\Instance; use App\Models\NotificationLog; use App\Models\Promise; use App\Models\Task; use App\Models\MasterGoal; use Illuminate\Auth\Access\HandlesAuthorization; class UserPolicy { use HandlesAuthorization; public function admin(User $user){ return $user->isAdmin(); } public function manager(User $user){ return $user->isManager(); } public function instance(User $user, Instance $instance){ return $user->instance_id == $instance->id; } public function entityInstance(User $user, $entity){ return $user->instance_id == $entity->instance_id; } public function adminAndInstance(User $user, Instance $instance){ return $user->isAdmin() && $user->instance_id == $instance->id; } public function adminAndEntityInstance(User $user, $entity){ return $user->isAdmin() && $user->instance_id == $entity->instance_id; } // Dynamically for all public function crudAction(User $user){ return $user->isAdmin() \|\| $user->isManager(); } public function crudActionManager(User $user, $entity){ if($user->isManager()){ if($entity instanceof MasterGoal){ $hasAccess = checkManagerAccess($entity->id, $user); }elseif($entity instanceof Objective){ $hasAccess = checkManagerAccess($entity->master_goal_id, $user); }elseif($entity instanceof KeyResult){ $hasAccess = checkManagerAccess($entity->objective->master_goal_id, $user); }elseif($entity instanceof Promise){ $keyResultIds = $entity->key_results()->pluck('key_result_id')->toArray(); $hasAccess = $this->storePromises($user, $keyResultIds); }elseif($entity instanceof Task){ $hasAccess = checkManagerAccess($entity->key_result->objective->master_goal_id, $user); // check for posibility that the manager is not for responsible RC flow if(!$hasAccess){ $hasAccess = $entity->key_result->user_id == $user->id; } }else{ $hasAccess = false; } return $hasAccess; }else{ if($entity instanceof Task){ $hasAccess = $entity->key_result->user_id == $user->id; }else{ $hasAccess = false; } return $hasAccess; } } public function crudActionAndEntityInstance(User $user, $entity){ return ($user->isAdmin() \|\| $this->crudActionManager($user, $entity)) && $this->entityInstance($user, $entity); } public function ownCrudActionOrAdmin(User $user, $entity){ return $this->crudActionAndEntityInstance($user, $entity) \|\| $entity->user_id == $user->id; } // for NotificationLog public function updateNotificationLog(User $user, NotificationLog $notificationLog){ return $user->id == $notificationLog->responsible_id; } public function storePromises(User $user, $keyResultIds){ foreach($keyResultIds as $keyResultId){ $keyResult = KeyResult::find($keyResultId); if($keyResult){ $hasAccess = $this->crudActionAndEntityInstance($user, $keyResult) \|\| $keyResult->user_id == $user->id; }else{ return false; } if(!$hasAccess){ return false; } } return true; } } Back

Edit File : UserPolicy.php | Size : 3.54 KB

<?php

namespace App\Policies;

use App\Models\User;
use App\Models\KeyResult;
use App\Models\Objective;
use App\Models\Instance;
use App\Models\NotificationLog;
use App\Models\Promise;
use App\Models\Task;
use App\Models\MasterGoal;
use Illuminate\Auth\Access\HandlesAuthorization;

class UserPolicy
{
    use HandlesAuthorization;

public function admin(User $user){
        return $user->isAdmin();
    }

public function manager(User $user){
        return $user->isManager();
    }

public function instance(User $user, Instance $instance){
        return $user->instance_id == $instance->id;
    }

public function entityInstance(User $user, $entity){
        return $user->instance_id == $entity->instance_id;
    }

public function adminAndInstance(User $user, Instance $instance){
        return $user->isAdmin() && $user->instance_id == $instance->id;
    }

public function adminAndEntityInstance(User $user, $entity){
        return $user->isAdmin() && $user->instance_id == $entity->instance_id;
    }

// Dynamically for all
    public function crudAction(User $user){
        return $user->isAdmin() || $user->isManager();
    }

public function crudActionManager(User $user, $entity){
        if($user->isManager()){
            if($entity instanceof MasterGoal){
                $hasAccess = checkManagerAccess($entity->id, $user);
            }elseif($entity instanceof Objective){
                $hasAccess = checkManagerAccess($entity->master_goal_id, $user);
            }elseif($entity instanceof KeyResult){
                $hasAccess = checkManagerAccess($entity->objective->master_goal_id, $user);
            }elseif($entity instanceof Promise){
                $keyResultIds = $entity->key_results()->pluck('key_result_id')->toArray();
                $hasAccess = $this->storePromises($user, $keyResultIds);
            }elseif($entity instanceof Task){
                $hasAccess = checkManagerAccess($entity->key_result->objective->master_goal_id, $user);
                // check for posibility that the manager is not for responsible RC flow
                if(!$hasAccess){
                    $hasAccess = $entity->key_result->user_id == $user->id;
                }
            }else{
                $hasAccess = false;
            }

return $hasAccess;
        }else{
            if($entity instanceof Task){
                $hasAccess = $entity->key_result->user_id == $user->id;
            }else{
                $hasAccess = false;
            }

return $hasAccess;
        }
    }

public function crudActionAndEntityInstance(User $user, $entity){
        return ($user->isAdmin() || $this->crudActionManager($user, $entity)) && $this->entityInstance($user, $entity);
    }

public function ownCrudActionOrAdmin(User $user, $entity){
        return $this->crudActionAndEntityInstance($user, $entity) || $entity->user_id == $user->id;
    }

// for NotificationLog
    public function updateNotificationLog(User $user, NotificationLog $notificationLog){
        return $user->id == $notificationLog->responsible_id;
    }

public function storePromises(User $user, $keyResultIds){
        foreach($keyResultIds as $keyResultId){
            $keyResult = KeyResult::find($keyResultId);
            if($keyResult){
                $hasAccess = $this->crudActionAndEntityInstance($user, $keyResult) || $keyResult->user_id == $user->id;
            }else{
                return false;
            }

if(!$hasAccess){
                return false;
            }
        }

return true;
    }
}

Back