<?php

namespace App\Http\Controllers;

use App\Enums\SystemRole;
use App\Models\TenantDevicePolicy;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;

class TenantDevicePolicyController extends Controller
{
    public function __invoke(Request $request): RedirectResponse
    {
        abort_unless($request->user()->hasRole(SystemRole::TenantAdmin->value), 403);
        $data = $request->validate([
            'tenant_user_can_create' => ['required', 'boolean'],
            'tenant_user_can_update_own' => ['required', 'boolean'],
            'tenant_user_can_delete_own' => ['required', 'boolean'],
        ]);
        TenantDevicePolicy::updateOrCreate(['tenant_id' => $request->user()->tenant_id], $data);

        return back()->with('success', 'Aturan perangkat Tenant User berhasil diperbarui.');
    }
}