| Server IP : 35.80.110.71 / Your IP : 216.73.216.221 Web Server : Apache/2.4.58 (Ubuntu) System : Linux ip-172-31-21-44 6.17.0-1019-aws #19~24.04.1-Ubuntu SMP Tue Jun 23 18:53:06 UTC 2026 x86_64 User : ubuntu ( 1000) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/client-portal-laravel/releases/20260626120707/app/Policies/ |
Upload File : |
<?php
namespace App\Policies;
use App\Models\Core\User;
use App\Models\Invoicing\Invoice;
class InvoicePolicy
{
/**
* Determine whether the user can view any invoices.
*/
public function viewAny(User $user): bool
{
// Admin can view all invoices
// Client users can view the list (but it will be scoped to their invoices)
return true;
}
/**
* Determine whether the user can view the invoice.
*/
public function view(User $user, Invoice $invoice): bool
{
if ($user->isAdmin()) {
return true;
}
return $user->belongsToClient($invoice->client);
}
/**
* Determine whether the user can create invoices.
*/
public function create(User $user): bool
{
return $user->isAdmin();
}
/**
* Determine whether the user can update the invoice.
*/
public function update(User $user, Invoice $invoice): bool
{
return $user->isAdmin();
}
/**
* Determine whether the user can delete the invoice.
*/
public function delete(User $user, Invoice $invoice): bool
{
return $user->isAdmin();
}
/**
* Determine whether the user can restore the invoice.
*/
public function restore(User $user, Invoice $invoice): bool
{
return $user->isAdmin();
}
/**
* Determine whether the user can permanently delete the invoice.
*/
public function forceDelete(User $user, Invoice $invoice): bool
{
return $user->isAdmin();
}
/**
* Determine whether the user can send the invoice.
*/
public function send(User $user, Invoice $invoice): bool
{
return $user->isAdmin();
}
/**
* Determine whether the user can mark the invoice as paid.
*/
public function markPaid(User $user, Invoice $invoice): bool
{
return $user->isAdmin();
}
/**
* Determine whether the user can download the invoice PDF.
*/
public function downloadPdf(User $user, Invoice $invoice): bool
{
if ($user->isAdmin()) {
return true;
}
return $user->belongsToClient($invoice->client);
}
}