74c6442728
- Refactor WorkspacePolicy to use pivot role instead of workspace.user_id - Add manageBilling policy (owner only) to BillingController - Fix ApiKeyController authorization (view → manageTeam for store/destroy) - Fix WorkspaceInviteController using workspace.user_id for owner checks - Fix WorkspaceController settings is_owner using workspace.user_id - Create PostAction enum for UpdatePost/PostController action strings - Create ApiToken\Status enum - Add User::SUBSCRIPTION_NAME constant, replace all hardcoded 'default' - Convert wantsEmailFor to accept NotificationType enum - Convert all $data[] to data_get() across publishers, controllers, jobs - Fix SocialLoginController callback missing try/catch - Fix SocialController::toggleActive missing workspace null check - Fix UpdatePost NPE on meta merge when postPlatform not found - Remove HTML5 required attributes from form inputs - Convert function declarations to arrow functions in Vue components - Replace hardcoded URLs with Wayfinder route helpers - Replace new Date() with dayjs - Add 16 new test files covering policies, authorization, publishing
113 lines
3.3 KiB
PHP
113 lines
3.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Http\Controllers\App;
|
|
|
|
use App\Actions\Label\CreateLabel;
|
|
use App\Actions\Label\DeleteLabel;
|
|
use App\Actions\Label\UpdateLabel;
|
|
use App\Models\WorkspaceLabel;
|
|
use Illuminate\Http\RedirectResponse;
|
|
use Illuminate\Http\Request;
|
|
use Inertia\Inertia;
|
|
use Inertia\Response;
|
|
|
|
class WorkspaceLabelController extends Controller
|
|
{
|
|
public function index(Request $request): Response|RedirectResponse
|
|
{
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
if (! $workspace) {
|
|
return redirect()->route('app.workspaces.create');
|
|
}
|
|
|
|
$this->authorize('createPost', $workspace);
|
|
|
|
$labels = $workspace->labels()
|
|
->when($request->input('search'), fn ($query, $search) => $query->where('name', 'ilike', "%{$search}%"))
|
|
->latest()
|
|
->paginate(config('app.pagination.default'));
|
|
|
|
return Inertia::render('labels/Index', [
|
|
'workspace' => $workspace,
|
|
'labels' => Inertia::scroll(fn () => $labels),
|
|
'filters' => [
|
|
'search' => $request->input('search', ''),
|
|
],
|
|
]);
|
|
}
|
|
|
|
public function store(Request $request): RedirectResponse
|
|
{
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
if (! $workspace) {
|
|
return redirect()->route('app.workspaces.create');
|
|
}
|
|
|
|
$this->authorize('createPost', $workspace);
|
|
|
|
$validated = $request->validate([
|
|
'name' => ['required', 'string', 'max:255'],
|
|
'color' => ['required', 'string', 'max:7', 'regex:/^#[0-9A-Fa-f]{6}$/'],
|
|
]);
|
|
|
|
CreateLabel::execute($workspace, $validated);
|
|
|
|
session()->flash('flash.banner', __('labels.flash.created'));
|
|
session()->flash('flash.bannerStyle', 'success');
|
|
|
|
return redirect()->route('app.labels.index');
|
|
}
|
|
|
|
public function update(Request $request, WorkspaceLabel $label): RedirectResponse
|
|
{
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
if (! $workspace) {
|
|
return redirect()->route('app.workspaces.create');
|
|
}
|
|
|
|
$this->authorize('createPost', $workspace);
|
|
|
|
if ($label->workspace_id !== $workspace->id) {
|
|
abort(404);
|
|
}
|
|
|
|
$validated = $request->validate([
|
|
'name' => ['required', 'string', 'max:255'],
|
|
'color' => ['required', 'string', 'max:7', 'regex:/^#[0-9A-Fa-f]{6}$/'],
|
|
]);
|
|
|
|
UpdateLabel::execute($label, $validated);
|
|
|
|
session()->flash('flash.banner', __('labels.flash.updated'));
|
|
session()->flash('flash.bannerStyle', 'success');
|
|
|
|
return redirect()->route('app.labels.index');
|
|
}
|
|
|
|
public function destroy(Request $request, WorkspaceLabel $label): RedirectResponse
|
|
{
|
|
$workspace = $request->user()->currentWorkspace;
|
|
|
|
if (! $workspace) {
|
|
return redirect()->route('app.workspaces.create');
|
|
}
|
|
|
|
$this->authorize('createPost', $workspace);
|
|
|
|
if ($label->workspace_id !== $workspace->id) {
|
|
abort(404);
|
|
}
|
|
|
|
DeleteLabel::execute($label);
|
|
|
|
session()->flash('flash.banner', __('labels.flash.deleted'));
|
|
session()->flash('flash.bannerStyle', 'success');
|
|
|
|
return redirect()->route('app.labels.index');
|
|
}
|
|
}
|