canDo('purchase.order.view') && $user->isAdmin()) { return true; } return $order->user_id == user_id() && $order->user_type == user_type(); } /** * Determine if the given user can create a order. * * @param UserPolicy $user * @param Order $order * * @return bool */ public function create(UserPolicy $user) { return $user->canDo('purchase.order.create'); } /** * Determine if the given user can update the given order. * * @param UserPolicy $user * @param Order $order * * @return bool */ public function update(UserPolicy $user, Order $order) { if ($user->canDo('purchase.order.edit') && $user->isAdmin()) { return true; } return $order->user_id == user_id() && $order->user_type == user_type(); } /** * Determine if the given user can delete the given order. * * @param UserPolicy $user * @param Order $order * * @return bool */ public function destroy(UserPolicy $user, Order $order) { return $order->user_id == user_id() && $order->user_type == user_type(); } /** * Determine if the given user can verify the given order. * * @param UserPolicy $user * @param Order $order * * @return bool */ public function verify(UserPolicy $user, Order $order) { if ($user->canDo('purchase.order.verify')) { return true; } return false; } /** * Determine if the given user can approve the given order. * * @param UserPolicy $user * @param Order $order * * @return bool */ public function approve(UserPolicy $user, Order $order) { if ($user->canDo('purchase.order.approve')) { return true; } return false; } /** * Determine if the user can perform a given action ve. * * @param [type] $user [description] * @param [type] $ability [description] * * @return [type] [description] */ public function before($user, $ability) { if ($user->isSuperuser()) { return true; } } }