72 lines
2.0 KiB
PHP
72 lines
2.0 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace Modules\Identity\Filament\Resources\Roles;
|
||
|
|
|
||
|
|
use BackedEnum;
|
||
|
|
use Filament\Resources\Resource;
|
||
|
|
use Filament\Schemas\Schema;
|
||
|
|
use Filament\Support\Icons\Heroicon;
|
||
|
|
use Filament\Tables\Table;
|
||
|
|
use Illuminate\Database\Eloquent\Model;
|
||
|
|
use Modules\Identity\Filament\Resources\Roles\Pages\EditRole;
|
||
|
|
use Modules\Identity\Filament\Resources\Roles\Pages\ListRoles;
|
||
|
|
use Modules\Identity\Filament\Resources\Roles\Schemas\RoleForm;
|
||
|
|
use Modules\Identity\Filament\Resources\Roles\Tables\RolesTable;
|
||
|
|
use Spatie\Permission\Models\Role;
|
||
|
|
use UnitEnum;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Deliberately no create/delete — role names (super_admin/admin/support)
|
||
|
|
* are hardcoded across policies, User::ADMIN_TIER_ROLES, and the panel
|
||
|
|
* login gate (domain.md §4, §8), so the role set itself must stay fixed.
|
||
|
|
* Only what each role can do (its permissions) is editable here.
|
||
|
|
*/
|
||
|
|
class RoleResource extends Resource
|
||
|
|
{
|
||
|
|
protected static ?string $model = Role::class;
|
||
|
|
|
||
|
|
protected static string|BackedEnum|null $navigationIcon = Heroicon::OutlinedShieldCheck;
|
||
|
|
|
||
|
|
protected static string|UnitEnum|null $navigationGroup = 'Access';
|
||
|
|
|
||
|
|
protected static ?string $navigationLabel = 'Roles';
|
||
|
|
|
||
|
|
public static function form(Schema $schema): Schema
|
||
|
|
{
|
||
|
|
return RoleForm::configure($schema);
|
||
|
|
}
|
||
|
|
|
||
|
|
public static function table(Table $table): Table
|
||
|
|
{
|
||
|
|
return RolesTable::configure($table);
|
||
|
|
}
|
||
|
|
|
||
|
|
public static function getPages(): array
|
||
|
|
{
|
||
|
|
return [
|
||
|
|
'index' => ListRoles::route('/'),
|
||
|
|
'edit' => EditRole::route('/{record}/edit'),
|
||
|
|
];
|
||
|
|
}
|
||
|
|
|
||
|
|
public static function canViewAny(): bool
|
||
|
|
{
|
||
|
|
return auth()->user()?->can('manage_roles') ?? false;
|
||
|
|
}
|
||
|
|
|
||
|
|
public static function canEdit(Model $record): bool
|
||
|
|
{
|
||
|
|
return auth()->user()?->can('manage_roles') ?? false;
|
||
|
|
}
|
||
|
|
|
||
|
|
public static function canCreate(): bool
|
||
|
|
{
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
|
||
|
|
public static function canDelete(Model $record): bool
|
||
|
|
{
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
}
|