403Webshell
Server IP : 35.80.110.71  /  Your IP : 216.73.216.221
Web Server : Apache/2.4.58 (Ubuntu)
System : Linux ip-172-31-21-44 6.17.0-1019-aws #19~24.04.1-Ubuntu SMP Tue Jun 23 18:53:06 UTC 2026 x86_64
User : ubuntu ( 1000)
PHP Version : 8.3.31
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : ON  |  Perl : ON  |  Python : OFF  |  Sudo : ON  |  Pkexec : OFF
Directory :  /var/www/client-portal-laravel/releases/20260626120707/app/Policies/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :


[ Back ]     

Current File : /var/www/client-portal-laravel/releases/20260626120707/app/Policies/ProposalPolicy.php
<?php

declare(strict_types=1);

namespace App\Policies;

use App\Models\Core\User;
use App\Models\Proposals\Proposal;

class ProposalPolicy
{
    /**
     * Determine whether the user can view any proposals.
     */
    public function viewAny(User $user): bool
    {
        return true;
    }

    /**
     * Determine whether the user can view the proposal.
     */
    public function view(User $user, Proposal $proposal): bool
    {
        if ($user->isAdmin()) {
            return true;
        }

        // Client users can only view sent/viewed/approved/rejected proposals
        if (! $proposal->isDraft()) {
            return $user->belongsToClient($proposal->client);
        }

        return false;
    }

    /**
     * Determine whether the user can create proposals.
     */
    public function create(User $user): bool
    {
        return $user->isAdmin();
    }

    /**
     * Determine whether the user can update the proposal.
     */
    public function update(User $user, Proposal $proposal): bool
    {
        if (! $user->isAdmin()) {
            return false;
        }

        return $proposal->canBeEdited();
    }

    /**
     * Determine whether the user can delete the proposal.
     */
    public function delete(User $user, Proposal $proposal): bool
    {
        if (! $user->isAdmin()) {
            return false;
        }

        // Can only delete draft proposals
        return $proposal->isDraft();
    }

    /**
     * Determine whether the user can send the proposal.
     */
    public function send(User $user, Proposal $proposal): bool
    {
        if (! $user->isAdmin()) {
            return false;
        }

        return $proposal->canBeSent();
    }

    /**
     * Determine whether the user can respond to the proposal (approve/reject).
     */
    public function respond(User $user, Proposal $proposal): bool
    {
        if ($user->isAdmin()) {
            return false;
        }

        if (! $proposal->canBeRespondedTo()) {
            return false;
        }

        return $user->belongsToClient($proposal->client);
    }

    /**
     * Determine whether the user can add a comment.
     */
    public function comment(User $user, Proposal $proposal): bool
    {
        if ($user->isAdmin()) {
            return true;
        }

        // Client users can comment on non-draft proposals
        if ($proposal->isDraft()) {
            return false;
        }

        return $user->belongsToClient($proposal->client);
    }

    /**
     * Determine whether the user can add internal comments.
     */
    public function commentInternal(User $user, Proposal $proposal): bool
    {
        return $user->isAdmin();
    }

    /**
     * Determine whether the user can convert the proposal to a project.
     */
    public function convertToProject(User $user, Proposal $proposal): bool
    {
        if (! $user->isAdmin()) {
            return false;
        }

        return $proposal->canBeConvertedToProject();
    }

    /**
     * Determine whether the user can duplicate the proposal.
     */
    public function duplicate(User $user, Proposal $proposal): bool
    {
        return $user->isAdmin();
    }
}

Youez - 2016 - github.com/yon3zu
LinuXploit