Created user admin role

2023-10-06 08:56:52 +01:00
parent c5d39153cd
commit aa923dbe52
1 changed files with 134 additions and 0 deletions
--- a/src/Database/Seeds/CreateUserAdmin.php
+++ b/src/Database/Seeds/CreateUserAdmin.php
@@ -0,0 +1,134 @@
+<?php
+
+/*
+ * AVSDev UF Tweaks (https://avsdev.uk)
+ *
+ * @link      https://git.avsdev.uk/avsdev/sprinkle-uf-tweaks
+ * @license   https://git.avsdev.uk/avsdev/sprinkle-uf-tweaks/blob/master/LICENSE.md (LGPL-3.0 License)
+ */
+
+namespace UserFrosting\Sprinkle\UFTweaks\Database\Seeds;
+
+use UserFrosting\Sprinkle\Account\Database\Seeds\DefaultPermissions as UFDefaultPermissions;
+use UserFrosting\Sprinkle\Account\Database\Models\Permission;
+use UserFrosting\Sprinkle\Account\Database\Models\Role;
+use UserFrosting\Sprinkle\Core\Database\Seeder\BaseSeed;
+use UserFrosting\Sprinkle\Core\Facades\Seeder;
+
+/**
+ * Seeder to create the user admin
+ */
+class CreateUserAdmin extends BaseSeed
+{
+    /**
+     * {@inheritdoc}
+     */
+    public function run()
+    {
+        Seeder::execute('DefaultPermissions');
+
+        $roles = $this->getRoles();
+        $this->saveRoles($roles);
+
+
+        $permissions = $this->getPermissions();
+        $this->syncPermissionsRole($roles, $permissions);
+    }
+
+    /**
+     * @return array Roles to seed
+     */
+    protected function getRoles()
+    {
+        return [
+            'user-admin' => new Role([
+                'slug'        => 'user-admin',
+                'name'        => 'User Administrator',
+                'description' => 'This role is meant for "user administrators", who can basically do anything related to users.',
+            ]),
+        ];
+    }
+
+    /**
+     * Save roles.
+     *
+     * @param array $roles
+     */
+    protected function saveRoles(array &$roles)
+    {
+        foreach ($roles as $slug => $role) {
+            // Trying to find if the role already exist
+            $existingRole = Role::where(['slug' => $role->slug])->first();
+
+            // Don't save if already exist, use existing role reference
+            // otherwise to re-sync permissions and roles
+            if ($existingRole == null) {
+                $role->save();
+            } else {
+                $roles[$slug] = $existingRole;
+            }
+        }
+    }
+
+    /**
+     * @return array Permissions to seed
+     */
+    protected function getPermissions()
+    {
+        $defaultRoleIds = [
+            'user'        => Role::where('slug', 'user')->first()->id,
+            'group-admin' => Role::where('slug', 'group-admin')->first()->id,
+            'site-admin'  => Role::where('slug', 'site-admin')->first()->id,
+        ];
+
+        return [
+            'uri_dashboard' => Permission::where([
+                ['slug', 'uri_dashboard'],
+                ['conditions', 'always()']
+            ])->first(),
+
+            'uri_user' => Permission::where([
+                ['slug', 'uri_user'],
+                ['conditions', 'always()']
+            ])->first(),
+            'uri_users' => Permission::where([
+                ['slug', 'uri_users'],
+                ['conditions', 'always()']
+            ])->first(),
+
+            'create_user' => Permission::where([
+                ['slug', 'create_user']
+            ])->first(),
+            'view_user_field' => Permission::where([
+                ['slug', 'view_user_field']
+            ])->first(),
+            'update_user_field' => Permission::where([
+                ['slug', 'update_user_field']
+            ])->first(),
+            'delete_user' => Permission::where([
+                ['slug', 'delete_user']
+            ])->first(),
+        ];
+    }
+
+
+    /**
+     * Sync permissions with default roles.
+     *
+     * @param array $permissions
+     */
+    protected function syncPermissionsRole(array $roles, array $permissions)
+    {
+        $roles['user-admin']->permissions()->syncWithoutDetaching([
+            $permissions['uri_dashboard']->id,
+
+            $permissions['uri_user']->id,
+            $permissions['uri_users']->id,
+
+            $permissions['create_user']->id,
+            $permissions['view_user_field']->id,
+            $permissions['update_user_field']->id,
+            $permissions['delete_user']->id,
+        ]);
+    }
+}