Super admin (#48)

* Update Role.php

* Update Permission.php

* Update RolesAndPermissionsSeeder.php

* Update .env.example

* Update .env.testing

* Update LoginController.php

* Update UsersSeeder.php

* Seed super admin and admin

* Update AuthServiceProvider.php

* Update User.php

* Update RolesAndPermissionsSeeder.php

Author: SebKay

.env.example

@@ -4,6 +4,7 @@ APP_KEY=base64:jpd/wy450S/8N0y6OfuRoZ8yS3AWEzrbkSgo08djF4w=
 APP_DEBUG=true
 APP_URL=http://laravel-inertia-template.test
 
+SEED_SUPER_ADMIN_EMAIL=super@laravel-inertia-template.test
 SEED_ADMIN_EMAIL=admin@laravel-inertia-template.test
 
 LOG_CHANNEL=stack

.env.testing

@@ -6,6 +6,7 @@ APP_URL=http://laravel-inertia-template.test
 
 BCRYPT_ROUNDS=4
 
+SEED_SUPER_ADMIN_EMAIL=super@laravel-inertia-template.test
 SEED_ADMIN_EMAIL=admin@laravel-inertia-template.test
 
 LOG_CHANNEL=stack

app/Enums/Permission.php

@@ -4,6 +4,8 @@
 
 enum Permission: string
 {
+    case ACCESS_ADMIN = 'access-filament';
+
     case EDIT_ORGANISATION = 'edit-organisation';
     case UPDATE_ORGANISATION = 'update-organisation';
 

app/Enums/Role.php

@@ -4,6 +4,7 @@
 
 enum Role: string
 {
+    case SUPER_ADMIN = 'super-admin';
     case ADMIN = 'admin';
     case USER = 'user';
 

app/Http/Controllers/LoginController.php

@@ -13,7 +13,7 @@ public function show(Request $request)
         $isProd = \app()->environment('production');
 
         return \inertia('Login/Show', [
-            'email' => ! $isProd ? \env('SEED_ADMIN_EMAIL') : '',
+            'email' => ! $isProd ? \env('SEED_SUPER_ADMIN_EMAIL') : '',
             'password' => ! $isProd ? '12345' : '',
             'remember' => ! $isProd ? true : false,
             'redirect' => $request->query('redirect', ''),

app/Models/User.php

@@ -79,7 +79,7 @@ public function updatePassword(?string $new_password = '')
 
     public function canAccessPanel(Panel $panel): bool
     {
-        return $this->hasRole(Role::ADMIN->value);
+        return $this->hasRole(Role::SUPER_ADMIN->value);
     }
 
     public function getFilamentName(): string

app/Providers/AuthServiceProvider.php

@@ -4,6 +4,7 @@
 
 // use Illuminate\Support\Facades\Gate;
 
+use App\Enums\Role;
 use App\Models\User;
 use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
 use Illuminate\Support\Facades\Gate;
@@ -27,7 +28,7 @@ class AuthServiceProvider extends ServiceProvider
     public function boot()
     {
         Gate::define('viewPulse', function (User $user) {
-            return $user->hasRole('admin');
+            return $user->hasRole(Role::SUPER_ADMIN->value);
         });
     }
 }

database/seeders/OrganisationsSeeder.php

@@ -14,7 +14,7 @@ class OrganisationsSeeder extends Seeder
 
     public function run()
     {
-        User::whereHas('roles', fn ($q) => $q->where('name', Role::ADMIN->value))
+        User::whereHas('roles', fn ($q) => $q->where('name', [Role::SUPER_ADMIN->value, Role::ADMIN->value]))
             ->get()
             ->each(function (User $user) {
                 $user->currentOrganisation()

database/seeders/RolesAndPermissionsSeeder.php

@@ -16,6 +16,8 @@ class RolesAndPermissionsSeeder extends Seeder
 
     protected Collection $roles;
 
+    protected Collection $superAdminPermissions;
+
     protected Collection $orgnaisationPermissions;
 
     protected Collection $postPermissions;
@@ -30,13 +32,18 @@ public function run()
     protected function createRoles()
     {
         $this->roles = \collect([
+            Role::SUPER_ADMIN->value => SpatieRole::create(['name' => Role::SUPER_ADMIN]),
             Role::ADMIN->value => SpatieRole::create(['name' => Role::ADMIN]),
             Role::USER->value => SpatieRole::create(['name' => Role::USER]),
         ]);
     }
 
     protected function createPermissions()
     {
+        $this->superAdminPermissions = \collect([
+            SpatiePermission::create(['name' => Permission::ACCESS_ADMIN]),
+        ]);
+
         $this->orgnaisationPermissions = \collect([
             SpatiePermission::create(['name' => Permission::EDIT_ORGANISATION]),
             SpatiePermission::create(['name' => Permission::UPDATE_ORGANISATION]),
@@ -53,6 +60,8 @@ protected function createPermissions()
 
     protected function assignPermissionsToRoles()
     {
+        $this->roles->get(Role::SUPER_ADMIN->value)->givePermissionTo($this->superAdminPermissions);
+
         $this->roles->get(Role::ADMIN->value)->givePermissionTo($this->postPermissions);
         $this->roles->get(Role::ADMIN->value)->givePermissionTo($this->orgnaisationPermissions);
 

database/seeders/UsersSeeder.php

@@ -13,6 +13,14 @@ class UsersSeeder extends Seeder
 
     public function run()
     {
+        User::factory()
+            ->afterCreating(function (User $user) {
+                $user->assignRole(Role::SUPER_ADMIN->value, Role::ADMIN->value);
+            })
+            ->create([
+                'email' => \env('SEED_SUPER_ADMIN_EMAIL'),
+            ]);
+
         User::factory()
             ->afterCreating(function (User $user) {
                 $user->assignRole(Role::ADMIN->value);