big update base struktur tahap 1

2026-07-27 16:24:09 +07:00
parent 2b3592c4c2
commit 1dd02baa72
169 changed files with 24405 additions and 977 deletions
@@ -0,0 +1,75 @@
+<?php
+
+namespace App\Services\Access;
+
+use App\Models\User;
+use Illuminate\Support\Facades\DB;
+
+class AccessService
+{
+    public function tenantId(User $user, ?int $requestedTenantId = null): ?int
+    {
+        if ($requestedTenantId) {
+            if ($user->isMasterAdmin() || $user->userTenants()->where('tenant_id', $requestedTenantId)->exists()) {
+                return $requestedTenantId;
+            }
+
+            return null;
+        }
+
+        return $user->userTenants()
+            ->orderByDesc('is_default')
+            ->orderBy('id')
+            ->value('tenant_id');
+    }
+
+    public function hasMenuPermission(
+        User $user,
+        string $menuSlug,
+        string $permission,
+        ?int $tenantId
+    ): bool {
+        if ($user->isMasterAdmin()) {
+            return true;
+        }
+
+        $column = 'can_'.$permission;
+        $allowed = [
+            'can_view',
+            'can_create',
+            'can_update',
+            'can_delete',
+            'can_approve',
+            'can_export',
+        ];
+
+        if (! in_array($column, $allowed, true) || ! $tenantId) {
+            return false;
+        }
+
+        return DB::table('user_menu_groups as umg')
+            ->join('menu_groups as mg', 'mg.id', '=', 'umg.menu_group_id')
+            ->join('menu_group_menus as mgm', 'mgm.menu_group_id', '=', 'mg.id')
+            ->join('menu_lists as ml', 'ml.id', '=', 'mgm.menu_id')
+            ->where('umg.user_id', $user->id)
+            ->where('umg.tenant_id', $tenantId)
+            ->where('mg.is_active', true)
+            ->where('ml.is_active', true)
+            ->where('ml.slug', $menuSlug)
+            ->where("mgm.$column", true)
+            ->exists();
+    }
+
+    public function canManageUser(User $actor, User $target, ?int $tenantId): bool
+    {
+        if ($actor->isMasterAdmin()) {
+            return true;
+        }
+
+        if (! $actor->isTenantOwner() || ! $tenantId || $target->isMasterAdmin()) {
+            return false;
+        }
+
+        return $target->userTenants()->where('tenant_id', $tenantId)->exists();
+    }
+}