Server : Apache System : Linux server2.corals.io 4.18.0-348.2.1.el8_5.x86_64 #1 SMP Mon Nov 15 09:17:08 EST 2021 x86_64 User : corals ( 1002) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system Directory :  /home/corals/medad.corals.io/Corals/modules/Medad/Policies/

Upload File : current_dir [ Writeable ] document_root [ Writeable ]

<?php

namespace Corals\Modules\Medad\Policies;

use Corals\Modules\Medad\Constants\CompanyTypeConstants;
use Corals\Modules\Medad\Facades\Medad;
use Corals\Modules\Medad\Models\PurchaseOrder;
use Corals\Modules\Medad\Traits\MedadItemsAccessTrait;
use Corals\User\Models\User;

class PurchaseOrderPolicy extends MedadPolicy
{
    use MedadItemsAccessTrait;

    protected $administrationPermission = 'Administrations::admin.medad';

    /**
     * @param User $user
     * @param PurchaseOrder|null $purchaseOrder
     * @return bool
     */
    public function view(User $user, PurchaseOrder $purchaseOrder = null)
    {
        if ($user->can('Medad::purchase_order.view') && $this->canAccess($purchaseOrder, false)) {
            return true;
        }

        return false;
    }

    /**
     * @param User $user
     * @return bool
     */
    public function create(User $user)
    {
        return ($user->can('Medad::purchase_order.create'));
    }

    /**
     * @param User $user
     * @param PurchaseOrder $purchaseOrder
     * @return bool
     */
    public function update(User $user, PurchaseOrder $purchaseOrder)
    {
        if (($user->can('Medad::purchase_order.update')
                && $this->canAccess($purchaseOrder)
                && $purchaseOrder->status == 'draft') && (
                $this->isAdministrator($user)
                || $purchaseOrder->owner_id == $user->id
            )) {
            return true;
        }
        return false;
    }

    /**
     * @param User $user
     * @param PurchaseOrder $purchaseOrder
     * @return bool
     */
    public function destroy(User $user, PurchaseOrder $purchaseOrder)
    {
        if ($user->can('Medad::purchase_order.delete') && $this->canAccess($purchaseOrder)) {
            return true;
        }
        return false;
    }

    public function canCreateDeliveryNote(User $user, PurchaseOrder $purchaseOrder)
    {
        return $user->can('Medad::delivery_note.create')
            && Medad::getCurrentCompanyType() == CompanyTypeConstants::SUPPLIER
            && $purchaseOrder->status == 'open';
    }

    public function canCreateInvoice(User $user, PurchaseOrder $purchaseOrder)
    {
        return $user->can('Medad::invoice.create')
            && Medad::getCurrentCompanyType() == CompanyTypeConstants::SUPPLIER
            && $purchaseOrder->status == 'open';
    }

    public function markAsClosed(User $user, PurchaseOrder $purchaseOrder)
    {
        return $this->canAccess($purchaseOrder) && $purchaseOrder->status == 'open';
    }

}