canDo('file_repository.attachments.view') && $user->is('admin')) { return true; } if ($user->canDo('blocks.block.view') && $user->is('manager') && $block->user->parent_id == $user->id) { return true; } return $user->id === $attachments->user_id; } /** * Determine if the given user can create a attachments. * * @param User $user * @param Attachments $attachments * * @return bool */ public function create(User $user) { return $user->canDo('file_repository.attachments.create'); } /** * Determine if the given user can update the given attachments. * * @param User $user * @param Attachments $attachments * * @return bool */ public function update(User $user, Attachments $attachments) { if ($user->canDo('file_repository.attachments.update') && $user->is('admin')) { return true; } if ($user->canDo('blocks.block.update') && $user->is('manager') && $block->user->parent_id == $user->id) { return true; } return $user->id === $attachments->user_id; } /** * Determine if the given user can delete the given attachments. * * @param User $user * @param Attachments $attachments * * @return bool */ public function destroy(User $user, Attachments $attachments) { if ($user->canDo('file_repository.attachments.delete') && $user->is('admin')) { return true; } if ($user->canDo('blocks.block.delete') && $user->is('manager') && $block->user->parent_id == $user->id) { return true; } return $user->id === $attachments->user_id; } /** * Determine if the given user can verify the given attachments. * * @param User $user * @param Attachments $attachments * * @return bool */ public function verify(User $user, Attachments $attachments) { if ($user->canDo('file_repository.attachments.verify') && $user->is('admin')) { return true; } if ($user->canDo('file_repository.attachments.verify') && $user->is('manager') && $attachments->user->parent_id == $user->id) { return true; } return false; } /** * Determine if the given user can approve the given attachments. * * @param User $user * @param Attachments $attachments * * @return bool */ public function approve(User $user, Attachments $attachments) { if ($user->canDo('file_repository.attachments.approve') && $user->is('admin')) { return true; } return false; } /** * Determine if the user can perform a given action ve. * * @param [type] $user [description] * @param [type] $ability [description] * * @return [type] [description] */ public function before($user, $ability) { if ($user->isSuperUser()) { return true; } } }