136 lines
3.6 KiB
PHP
136 lines
3.6 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Http\Requests\StoreUserRequest;
|
|
use App\Http\Requests\UpdateUserRequest;
|
|
use App\Jobs\SendMailJob;
|
|
use App\Models\User;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\Hash;
|
|
use Illuminate\Support\Facades\Mail;
|
|
use Spatie\Permission\Models\Role;
|
|
|
|
class UsersController extends Controller
|
|
{
|
|
|
|
|
|
public function __construct()
|
|
{
|
|
$this->middleware('auth');
|
|
$this->middleware('permission:create-user|edit-user|delete-user', ['only' => ['index', 'show']]);
|
|
$this->middleware('permission:create-user', ['only' => ['create', 'store']]);
|
|
$this->middleware('permission:edit-user', ['only' => ['edit', 'update']]);
|
|
$this->middleware('permission:delete-user', ['only' => ['destroy']]);
|
|
}
|
|
|
|
/**
|
|
* Display a listing of the resource.
|
|
*/
|
|
public function index()
|
|
{
|
|
return view('users.index', [
|
|
'users' => User::latest('id')->paginate(10)
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Show the form for creating a new resource.
|
|
*/
|
|
public function create()
|
|
{
|
|
return view('users.create', [
|
|
'roles' => Role::pluck('name')->all()
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Store a newly created resource in storage.
|
|
*/
|
|
public function store(StoreUserRequest $request)
|
|
{
|
|
$input = $request->all();
|
|
$input['password'] = Hash::make($request->password);
|
|
|
|
$user = User::create($input);
|
|
$user->assignRole($request->roles);
|
|
|
|
return redirect()->route('users.index')
|
|
->withSuccess('New user is added successfully.');
|
|
}
|
|
|
|
/**
|
|
* Display the specified resource.
|
|
*/
|
|
public function show(User $user)
|
|
{
|
|
//dispatch(new SendMailJob($user));
|
|
return view('users.show', [
|
|
'user' => $user
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Show the form for editing the specified resource.
|
|
*/
|
|
public function edit(User $user)
|
|
{
|
|
// Check Only ADMIN can update his own Profile
|
|
if ($user->hasRole('ADMIN')) {
|
|
if ($user->id != auth()->user()->id) {
|
|
abort(403, 'USER DOES NOT HAVE THE RIGHT PERMISSIONS');
|
|
}
|
|
}
|
|
|
|
return view('users.edit', [
|
|
'user' => $user,
|
|
'roles' => Role::pluck('name')->all(),
|
|
'userRoles' => $user->roles->pluck('name')->all()
|
|
]);
|
|
}
|
|
|
|
/**
|
|
* Update the specified resource in storage.
|
|
*/
|
|
public function update(UpdateUserRequest $request, User $user)
|
|
{
|
|
$input = $request->all();
|
|
|
|
if (!empty($request->password)) {
|
|
$input['password'] = Hash::make($request->password);
|
|
} else {
|
|
$input = $request->except('password');
|
|
}
|
|
|
|
|
|
if ($request->hasFile('image')) {
|
|
$filename = $request->image->getClientOriginalName();
|
|
$request->image->storeAs('images', $filename, 'public');
|
|
$input['image'] = $filename;
|
|
}
|
|
|
|
$user->update($input);
|
|
|
|
$user->syncRoles($request->roles);
|
|
|
|
return redirect()->back()
|
|
->withSuccess('User is updated successfully.');
|
|
}
|
|
|
|
/**
|
|
* Remove the specified resource from storage.
|
|
*/
|
|
public function destroy(User $user)
|
|
{
|
|
// About if user is ADMIN or User ID belongs to Auth User
|
|
if ($user->hasRole('ADMIN') || $user->id == auth()->user()->id) {
|
|
abort(403, 'USER DOES NOT HAVE THE RIGHT PERMISSIONS');
|
|
}
|
|
|
|
$user->syncRoles([]);
|
|
$user->delete();
|
|
return redirect()->route('users.index')
|
|
->withSuccess('User is deleted successfully.');
|
|
}
|
|
}
|