| Server IP : 35.80.110.71 / Your IP : 216.73.216.221 Web Server : Apache/2.4.58 (Ubuntu) System : Linux ip-172-31-21-44 6.17.0-1019-aws #19~24.04.1-Ubuntu SMP Tue Jun 23 18:53:06 UTC 2026 x86_64 User : ubuntu ( 1000) PHP Version : 8.3.31 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/client-portal-laravel/releases/20260626120707/app/Policies/ |
Upload File : |
<?php
declare(strict_types=1);
namespace App\Policies;
use App\Models\Core\User;
use App\Models\Proposals\Proposal;
class ProposalPolicy
{
/**
* Determine whether the user can view any proposals.
*/
public function viewAny(User $user): bool
{
return true;
}
/**
* Determine whether the user can view the proposal.
*/
public function view(User $user, Proposal $proposal): bool
{
if ($user->isAdmin()) {
return true;
}
// Client users can only view sent/viewed/approved/rejected proposals
if (! $proposal->isDraft()) {
return $user->belongsToClient($proposal->client);
}
return false;
}
/**
* Determine whether the user can create proposals.
*/
public function create(User $user): bool
{
return $user->isAdmin();
}
/**
* Determine whether the user can update the proposal.
*/
public function update(User $user, Proposal $proposal): bool
{
if (! $user->isAdmin()) {
return false;
}
return $proposal->canBeEdited();
}
/**
* Determine whether the user can delete the proposal.
*/
public function delete(User $user, Proposal $proposal): bool
{
if (! $user->isAdmin()) {
return false;
}
// Can only delete draft proposals
return $proposal->isDraft();
}
/**
* Determine whether the user can send the proposal.
*/
public function send(User $user, Proposal $proposal): bool
{
if (! $user->isAdmin()) {
return false;
}
return $proposal->canBeSent();
}
/**
* Determine whether the user can respond to the proposal (approve/reject).
*/
public function respond(User $user, Proposal $proposal): bool
{
if ($user->isAdmin()) {
return false;
}
if (! $proposal->canBeRespondedTo()) {
return false;
}
return $user->belongsToClient($proposal->client);
}
/**
* Determine whether the user can add a comment.
*/
public function comment(User $user, Proposal $proposal): bool
{
if ($user->isAdmin()) {
return true;
}
// Client users can comment on non-draft proposals
if ($proposal->isDraft()) {
return false;
}
return $user->belongsToClient($proposal->client);
}
/**
* Determine whether the user can add internal comments.
*/
public function commentInternal(User $user, Proposal $proposal): bool
{
return $user->isAdmin();
}
/**
* Determine whether the user can convert the proposal to a project.
*/
public function convertToProject(User $user, Proposal $proposal): bool
{
if (! $user->isAdmin()) {
return false;
}
return $proposal->canBeConvertedToProject();
}
/**
* Determine whether the user can duplicate the proposal.
*/
public function duplicate(User $user, Proposal $proposal): bool
{
return $user->isAdmin();
}
}