/public/js
/public/uploads
/public/bower
-/public/build
/storage/images
_ide_helper.php
/storage/debugbar
\ No newline at end of file
$this->signedIn = auth()->check();
}
+ /**
+ * Stops the application and shows a permission error if
+ * the application is in demo mode.
+ */
+ protected function preventAccessForDemoUsers()
+ {
+ if (env('APP_ENV', 'production') === 'demo') $this->showPermissionError();
+ }
+
/**
* Adds the page title into the view.
* @param $title
view()->share('pageTitle', $title);
}
+ /**
+ * On a permission error redirect to home and display
+ * the error as a notification.
+ */
+ protected function showPermissionError()
+ {
+ Session::flash('error', trans('errors.permission'));
+ throw new HttpResponseException(
+ redirect('/')
+ );
+ }
+
/**
* Checks for a permission.
*
protected function checkPermission($permissionName)
{
if (!$this->currentUser || !$this->currentUser->can($permissionName)) {
- Session::flash('error', trans('errors.permission'));
- throw new HttpResponseException(
- redirect('/')
- );
+ $this->showPermissionError();
}
return true;
}
+ /**
+ * Check if a user has a permission or bypass if the callback is true.
+ * @param $permissionName
+ * @param $callback
+ * @return bool
+ */
protected function checkPermissionOr($permissionName, $callback)
{
$callbackResult = $callback();
*/
public function update(Request $request)
{
+ $this->preventAccessForDemoUsers();
$this->checkPermission('settings-update');
+
// Cycles through posted settings and update them
foreach($request->all() as $name => $value) {
if(strpos($name, 'setting-') !== 0) continue;
$key = str_replace('setting-', '', trim($name));
Setting::put($key, $value);
}
+
session()->flash('success', 'Settings Saved');
return redirect('/settings');
}
*/
public function update(Request $request, $id)
{
+ $this->preventAccessForDemoUsers();
$this->checkPermissionOr('user-update', function () use ($id) {
return $this->currentUser->id == $id;
});
+
$this->validate($request, [
'name' => 'required',
'email' => 'required|email|unique:users,email,' . $id,
$this->checkPermissionOr('user-delete', function () use ($id) {
return $this->currentUser->id == $id;
});
+
$user = $this->user->findOrFail($id);
$this->setPageTitle('Delete User ' . $user->name);
return view('users/delete', ['user' => $user]);
*/
public function destroy($id)
{
+ $this->preventAccessForDemoUsers();
$this->checkPermissionOr('user-delete', function () use ($id) {
return $this->currentUser->id == $id;
});
--- /dev/null
+*
+!.gitignore