CheckAdminActivityFor.php

Go to the documentation of this file.

<?php

namespace BristolSU\Support\Authorization\Middleware;

use BristolSU\Support\Authentication\Contracts\Authentication;
use BristolSU\Support\Authorization\Exception\ActivityRequiresAdmin;
use BristolSU\Support\Logic\Facade\LogicTester;
use Closure;
use Illuminate\Http\Request;

class CheckAdminActivityFor
{
    private $authentication;

    public function __construct(Authentication $authentication)
    {
        $this->authentication = $authentication;
    }

    public function handle(Request $request, Closure $next)
    {
        $activity = $request->route('activity_slug');
        if (!LogicTester::evaluate($activity->adminLogic, $this->authentication->getUser(), $this->authentication->getGroup(), $this->authentication->getRole())) {
            throw ActivityRequiresAdmin::createWithActivity($activity, 'You must be an administrator to access this page', 403);
        }
        return $next($request);
    }
}