Javier Braña
f566d370be
- Move Route::model to register() in AppServiceProvider so it persists in route cache - Re-register in boot() for runtime - Fix navigation spacing for language/notification/user menu All 101 tests pass
46 lines
1.2 KiB
PHP
46 lines
1.2 KiB
PHP
<?php
|
|
|
|
namespace App\Providers;
|
|
|
|
use App\Models\Project;
|
|
use App\Models\Task;
|
|
use App\Policies\TaskPolicy;
|
|
use Illuminate\Support\Facades\Gate;
|
|
use Illuminate\Support\Facades\Route;
|
|
use Illuminate\Support\ServiceProvider;
|
|
|
|
class AppServiceProvider extends ServiceProvider
|
|
{
|
|
/**
|
|
* Register any application services.
|
|
*/
|
|
public function register(): void
|
|
{
|
|
// Register route model bindings early (before routes are loaded)
|
|
Route::model('project', Project::class);
|
|
}
|
|
|
|
/**
|
|
* Bootstrap any application services.
|
|
*/
|
|
public function boot(): void
|
|
{
|
|
// Re-register model bindings so they persist in route cache
|
|
Route::model('project', Project::class);
|
|
|
|
// Register policies
|
|
Gate::policy(Task::class, TaskPolicy::class);
|
|
|
|
// Super-admin bypass: anyone with the "manage all" permission
|
|
// (the Admin role has it) passes every authorization check.
|
|
// Return true to allow, or null to let normal checks run — never false.
|
|
Gate::before(function ($user, $ability) {
|
|
try {
|
|
return $user->hasPermissionTo('manage all') ? true : null;
|
|
} catch (\Throwable $e) {
|
|
return null;
|
|
}
|
|
});
|
|
}
|
|
}
|