Add all files
This commit is contained in:
44
app/Http/Controllers/Api/ApiController.php
Normal file
44
app/Http/Controllers/Api/ApiController.php
Normal file
@@ -0,0 +1,44 @@
|
||||
<?php
|
||||
|
||||
namespace App\Http\Controllers\Api;
|
||||
|
||||
use App\Http\Controllers\Controller;
|
||||
use Illuminate\Http\Response;
|
||||
|
||||
abstract class ApiController extends Controller
|
||||
{
|
||||
const MAPPED_INCLUDES = [
|
||||
'messages' => 'ticket_messages',
|
||||
'role' => 'roles',
|
||||
'user' => 'users',
|
||||
'ticket' => 'tickets',
|
||||
];
|
||||
|
||||
protected function allowedIncludes($includes = []): array
|
||||
{
|
||||
// Check if user has permission to include the specified relationships
|
||||
$allowedIncludes = [];
|
||||
|
||||
foreach ($includes as $include) {
|
||||
// Check if the include is mapped to a specific relation
|
||||
$relation = self::MAPPED_INCLUDES[$include] ?? $include;
|
||||
|
||||
if (
|
||||
in_array('admin.' . $relation . '.view', request()->attributes->get('api_key_permissions', [])) ||
|
||||
!in_array('admin.' . $relation . '.view', config('permissions.api.admin', []))
|
||||
) {
|
||||
$allowedIncludes[] = $include;
|
||||
}
|
||||
}
|
||||
|
||||
return $allowedIncludes;
|
||||
}
|
||||
|
||||
/**
|
||||
* Return an HTTP/204 response for the API.
|
||||
*/
|
||||
protected function returnNoContent(): Response
|
||||
{
|
||||
return new Response('', Response::HTTP_NO_CONTENT);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user