40 lines
867 B
PHP
40 lines
867 B
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace Modules\Identity\Policies;
|
||
|
|
|
||
|
|
use App\Models\User;
|
||
|
|
use Spatie\Activitylog\Models\Activity;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* The audit trail (T6.2) is read-only from the admin panel — nothing ever
|
||
|
|
* creates/edits/deletes an Activity row through Filament, only the
|
||
|
|
* LogsActivity trait writes here. Gated by view_audit_log per domain.md §8.
|
||
|
|
*/
|
||
|
|
class AuditLogPolicy
|
||
|
|
{
|
||
|
|
public function viewAny(User $user): bool
|
||
|
|
{
|
||
|
|
return $user->can('view_audit_log');
|
||
|
|
}
|
||
|
|
|
||
|
|
public function view(User $user, Activity $activity): bool
|
||
|
|
{
|
||
|
|
return $user->can('view_audit_log');
|
||
|
|
}
|
||
|
|
|
||
|
|
public function create(User $user): bool
|
||
|
|
{
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
public function update(User $user, Activity $activity): bool
|
||
|
|
{
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
public function delete(User $user, Activity $activity): bool
|
||
|
|
{
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|