fix user module

packages/Webkul/User/composer.json

@@ -19,7 +19,8 @@
                 "Webkul\\User\\Providers\\UserServiceProvider"
             ],
             "aliases": {
-                "Bouncer": "Webkul\\User\\Facades\\Bouncer"
+                "Bouncer": "Webkul\\User\\Facades\\Bouncer",
+                "BouncerManage": "Webkul\\User\\Facades\\BouncerManage"
             }
         }
     },

packages/Webkul/User/src/BouncerManage.php

@@ -0,0 +1,47 @@
+<?php
+
+namespace Webkul\User;
+
+class BouncerManage
+{
+    /**
+     * Checks if user allowed or not for certain action
+     *
+     * @param  string  $permission
+     * @return void
+     */
+    public function hasPermission($permission)
+    {
+        if (
+            auth()->guard('manage')->check()
+            && auth()->guard('manage')->user()->role->permission_type == 'all'
+        ) {
+            return true;
+        } else {
+            if (
+                ! auth()->guard('manage')->check()
+                || ! auth()->guard('manage')->user()->hasPermission($permission)
+            ) {
+                return false;
+            }
+        }
+
+        return true;
+    }
+
+    /**
+     * Checks if user allowed or not for certain action
+     *
+     * @param  string  $permission
+     * @return void
+     */
+    public static function allow($permission)
+    {
+        if (
+            ! auth()->guard('manage')->check()
+            || ! auth()->guard('manage')->user()->hasPermission($permission)
+        ) {
+            abort(401, 'This action is unauthorized');
+        }
+    }
+}

packages/Webkul/User/src/Contracts/Manage.php

@@ -0,0 +1,7 @@
+<?php
+
+namespace Webkul\User\Contracts;
+
+interface Manage
+{
+}

packages/Webkul/User/src/Facades/BouncerManage.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace Webkul\User\Facades;
+
+use Illuminate\Support\Facades\Facade;
+
+class BouncerManage extends Facade
+{
+    /**
+     * Get the registered name of the component.
+     *
+     * @return string
+     */
+    protected static function getFacadeAccessor()
+    {
+        return 'bouncer_manage';
+    }
+}

packages/Webkul/User/src/Http/Middleware/BouncerManage.php

@@ -0,0 +1,95 @@
+<?php
+
+namespace Webkul\User\Http\Middleware;
+
+use Illuminate\Support\Facades\Route;
+use Illuminate\Support\Facades\Event;
+
+class BouncerManage
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @param  \Closure  $next
+     * @param  string|null  $guard
+     * @return mixed
+     */
+    public function handle($request, \Closure $next, $guard = 'manage')
+    {
+        if (! auth()->guard($guard)->check()) {
+            return redirect()->route('manage.session.create');
+        }
+
+        Event::dispatch('bagisto.updates.check');
+
+        /**
+         * If user status is changed by manage. Then session should be
+         * logged out.
+         */
+        if (! (bool) auth()->guard($guard)->user()->status) {
+            auth()->guard($guard)->logout();
+
+            return redirect()->route('manage.session.create');
+        }
+
+        /**
+         * If somehow the user deleted all permissions, then it should be
+         * auto logged out and need to contact the administrator again.
+         */
+        if ($this->isPermissionsEmpty()) {
+            auth()->guard('manage')->logout();
+
+            session()->flash('error', __('manage::app.error.403.message'));
+
+            return redirect()->route('manage.session.create');
+        }
+
+        return $next($request);
+    }
+
+    /**
+     * Check for user, if they have empty permissions or not except admin.
+     *
+     * @return bool
+     */
+    public function isPermissionsEmpty()
+    {
+        if (! $role = auth()->guard('manage')->user()->role) {
+            abort(401, 'This action is unauthorized.');
+        }
+
+        if ($role->permission_type === 'all') {
+            return false;
+        }
+
+        if (
+            $role->permission_type !== 'all'
+            && empty($role->permissions)
+        ) {
+            return true;
+        }
+
+        $this->checkIfAuthorized();
+
+        return false;
+    }
+
+    /**
+     * Check authorization.
+     *
+     * @return null
+     */
+    public function checkIfAuthorized()
+    {
+        $acl = app('acl');
+
+        if (! $acl) {
+            return;
+        }
+
+        if (isset($acl->roles[Route::currentRouteName()])) {
+            bouncer()->allow($acl->roles[Route::currentRouteName()]);
+        }
+    }
+}

packages/Webkul/User/src/Http/helpers.php

@@ -5,4 +5,12 @@ function bouncer()
             return app()->make(\Webkul\User\Bouncer::class);
         }
     }
+
+    if (! function_exists('bouncer_manage')) {
+        function bouncer_manage()
+        {
+            return app()->make(\Webkul\User\BouncerManage::class);
+        }
+    }
+
 ?>

packages/Webkul/User/src/Providers/UserServiceProvider.php

@@ -6,7 +6,9 @@
 use Illuminate\Foundation\AliasLoader;
 use Illuminate\Routing\Router;
 use Webkul\User\Bouncer;
+use Webkul\User\BouncerManage;
 use Webkul\User\Facades\Bouncer as BouncerFacade;
+use Webkul\User\Facades\BouncerManage as BouncerManageFacade;
 use Webkul\User\Http\Middleware\Bouncer as BouncerMiddleware;
 
 class UserServiceProvider extends ServiceProvider
@@ -48,5 +50,10 @@ protected function registerBouncer()
         $this->app->singleton('bouncer', function () {
             return new Bouncer();
         });
+
+        $loader->alias('BouncerManage', BouncerManageFacade::class);
+        $this->app->singleton('bouncer_manage', function () {
+            return new BouncerManage();
+        });
     }
 }