feat:adds ability to share portfolios

also includes basic permissions and authorization

app/Imports/ValidatesPortfolioPermissions.php

@@ -3,6 +3,7 @@
 namespace App\Imports;
 
 use Exception;
+use App\Models\Portfolio;
 
 trait ValidatesPortfolioPermissions {
     
@@ -12,7 +13,10 @@ trait ValidatesPortfolioPermissions {
         
         $collection->pluck('portfolio_id')->unique()->each(function($portfolio) use ($portfolios) {
 
-            if (!$portfolios->contains($portfolio)) {
+            if (
+                !$portfolios->contains($portfolio)
+                || auth()->user()->cannot('fullAccess', Portfolio::find($portfolio))
+            ) {
     
                 throw new Exception('You do not have permission to access that portfolio.');
             }