| Server IP : 35.80.110.71 / Your IP : 216.73.216.221 Web Server : Apache/2.4.58 (Ubuntu) System : Linux ip-172-31-21-44 6.17.0-1019-aws #19~24.04.1-Ubuntu SMP Tue Jun 23 18:53:06 UTC 2026 x86_64 User : ubuntu ( 1000) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/client-portal-laravel/releases/20260626120707/app/Policies/ |
Upload File : |
<?php
namespace App\Policies;
use App\Models\Core\User;
use App\Models\Files\ClientUpload;
class ClientUploadPolicy
{
/**
* Determine whether the user can view any client uploads.
*/
public function viewAny(User $user): bool
{
return true;
}
/**
* Determine whether the user can view the client upload.
*/
public function view(User $user, ClientUpload $upload): bool
{
if ($user->isAdmin()) {
return true;
}
return $user->belongsToClient($upload->client);
}
/**
* Determine whether the user can create client uploads.
*/
public function create(User $user): bool
{
// Both admins and clients can upload files
return true;
}
/**
* Determine whether the user can update the client upload.
*/
public function update(User $user, ClientUpload $upload): bool
{
if ($user->isAdmin()) {
return true;
}
// Users can update their own uploads
return $upload->uploaded_by === $user->id;
}
/**
* Determine whether the user can delete the client upload.
*/
public function delete(User $user, ClientUpload $upload): bool
{
if ($user->isAdmin()) {
return true;
}
// Users can delete their own uploads
return $upload->uploaded_by === $user->id;
}
/**
* Determine whether the user can download the client upload.
*/
public function download(User $user, ClientUpload $upload): bool
{
if ($user->isAdmin()) {
return true;
}
return $user->belongsToClient($upload->client);
}
}