mirror of
https://github.com/InvoiceShelf/InvoiceShelf.git
synced 2026-04-16 01:34:08 +00:00
00d5abae5f
Redistribute methods: - show() -> BootstrapController::currentCompany() - store(), destroy(), userCompanies() -> Admin\CompaniesController - transferOwnership() -> CompanySettingsController Security fix: introduce 'owner' role for company-level admin, distinct from 'super admin' which is now global platform admin only. - CompanyService::setupRoles() creates 'owner' role per company - Company creation assigns scoped 'owner' role instead of global 'super admin' - Seeders updated to assign 'owner' Migration renames all existing company-scoped 'super admin' roles to 'owner' and ensures every company owner has the role assigned.
87 lines
2.8 KiB
PHP
87 lines
2.8 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers\Company\General;
|
|
|
|
use App\Http\Controllers\Controller;
|
|
use App\Http\Resources\CompanyResource;
|
|
use App\Http\Resources\UserResource;
|
|
use App\Models\Company;
|
|
use App\Models\CompanySetting;
|
|
use App\Models\Currency;
|
|
use App\Models\Module;
|
|
use App\Models\Setting;
|
|
use App\Traits\GeneratesMenuTrait;
|
|
use Illuminate\Http\JsonResponse;
|
|
use Illuminate\Http\Request;
|
|
use Silber\Bouncer\BouncerFacade;
|
|
|
|
class BootstrapController extends Controller
|
|
{
|
|
use GeneratesMenuTrait;
|
|
|
|
/**
|
|
* Handle the incoming request.
|
|
*
|
|
* @return JsonResponse
|
|
*/
|
|
public function __invoke(Request $request)
|
|
{
|
|
$current_user = $request->user();
|
|
$current_user_settings = $current_user->getAllSettings();
|
|
|
|
$main_menu = $this->generateMenu('main_menu', $current_user);
|
|
|
|
$setting_menu = $this->generateMenu('setting_menu', $current_user);
|
|
|
|
$companies = $current_user->companies;
|
|
|
|
$current_company = Company::find($request->header('company'));
|
|
|
|
if ((! $current_company) || ($current_company && ! $current_user->hasCompany($current_company->id))) {
|
|
$current_company = $current_user->companies()->first();
|
|
}
|
|
|
|
$current_company_settings = CompanySetting::getAllSettings($current_company->id);
|
|
|
|
$current_company_currency = $current_company_settings->has('currency')
|
|
? Currency::find($current_company_settings->get('currency'))
|
|
: Currency::first();
|
|
|
|
BouncerFacade::refreshFor($current_user);
|
|
|
|
$global_settings = Setting::getSettings([
|
|
'api_token',
|
|
'admin_portal_theme',
|
|
'admin_portal_logo',
|
|
'login_page_logo',
|
|
'login_page_heading',
|
|
'login_page_description',
|
|
'admin_page_title',
|
|
'copyright_text',
|
|
'save_pdf_to_disk',
|
|
]);
|
|
|
|
return response()->json([
|
|
'current_user' => new UserResource($current_user),
|
|
'current_user_settings' => $current_user_settings,
|
|
'current_user_abilities' => $current_user->getAbilities(),
|
|
'companies' => CompanyResource::collection($companies),
|
|
'current_company' => new CompanyResource($current_company),
|
|
'current_company_settings' => $current_company_settings,
|
|
'current_company_currency' => $current_company_currency,
|
|
'config' => config('invoiceshelf'),
|
|
'global_settings' => $global_settings,
|
|
'main_menu' => $main_menu,
|
|
'setting_menu' => $setting_menu,
|
|
'modules' => Module::where('enabled', true)->pluck('name'),
|
|
]);
|
|
}
|
|
|
|
public function currentCompany(Request $request)
|
|
{
|
|
$company = Company::find($request->header('company'));
|
|
|
|
return new CompanyResource($company);
|
|
}
|
|
}
|