first commit

Author: jefpes

.editorconfig

@@ -0,0 +1,19 @@
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 2
+indent_style = space
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false
+
+
+[*.{yml,yaml}]
+indent_size = 2
+
+[docker-compose.yml]
+indent_size = 4

.env.example

@@ -0,0 +1,64 @@
+APP_NAME=ACL
+APP_ENV=local
+APP_KEY=
+APP_DEBUG=true
+APP_TIMEZONE=America/Sao_Paulo
+APP_URL=http://localhost
+
+APP_LOCALE=pt-br
+APP_FALLBACK_LOCALE=pt-br
+APP_FAKER_LOCALE=pt_BR
+
+APP_MAINTENANCE_DRIVER=file
+APP_MAINTENANCE_STORE=database
+
+BCRYPT_ROUNDS=12
+
+LOG_CHANNEL=stack
+LOG_STACK=single
+LOG_DEPRECATIONS_CHANNEL=null
+LOG_LEVEL=debug
+
+DB_CONNECTION=mysql
+DB_HOST=127.0.0.1
+DB_PORT=3306
+DB_DATABASE=aclbasic
+DB_USERNAME=root
+DB_PASSWORD=
+
+SESSION_DRIVER=database
+SESSION_LIFETIME=120
+SESSION_ENCRYPT=false
+SESSION_PATH=/
+SESSION_DOMAIN=null
+
+BROADCAST_CONNECTION=log
+FILESYSTEM_DISK=local
+QUEUE_CONNECTION=database
+
+CACHE_STORE=database
+CACHE_PREFIX=
+
+MEMCACHED_HOST=127.0.0.1
+
+REDIS_CLIENT=phpredis
+REDIS_HOST=127.0.0.1
+REDIS_PASSWORD=null
+REDIS_PORT=6379
+
+MAIL_MAILER=log
+MAIL_HOST=127.0.0.1
+MAIL_PORT=2525
+MAIL_USERNAME=null
+MAIL_PASSWORD=null
+MAIL_ENCRYPTION=null
+MAIL_FROM_ADDRESS="[email protected]"
+MAIL_FROM_NAME="${APP_NAME}"
+
+AWS_ACCESS_KEY_ID=
+AWS_SECRET_ACCESS_KEY=
+AWS_DEFAULT_REGION=us-east-1
+AWS_BUCKET=
+AWS_USE_PATH_STYLE_ENDPOINT=false
+
+VITE_APP_NAME="${APP_NAME}"

.gitattributes

@@ -0,0 +1,11 @@
+* text=auto eol=lf
+
+*.blade.php diff=html
+*.css diff=css
+*.html diff=html
+*.md diff=markdown
+*.php diff=php
+
+/.github export-ignore
+CHANGELOG.md export-ignore
+.styleci.yml export-ignore

.gitignore

@@ -0,0 +1,19 @@
+/.phpunit.cache
+/node_modules
+/public/build
+/public/hot
+/public/storage
+/storage/*.key
+/vendor
+.env
+.env.backup
+.env.production
+.phpunit.result.cache
+Homestead.json
+Homestead.yaml
+auth.json
+npm-debug.log
+yarn-error.log
+/.fleet
+/.idea
+/.vscode

README.md

@@ -0,0 +1,69 @@
+ACL Basic
+
+Description
+This is a web application built using the Laravel framework and Livewire component. The application manages users, roles, and abilities, allowing certain users to access different parts of the system based on their abilities associated with their roles. Additionally, roles have a hierarchy, ensuring that users with lower hierarchy cannot alter data of users with higher hierarchy.
+
+Technologies Used
+PHP
+Laravel
+Livewire
+Database (MySQL, PostgreSQL, etc.)
+Key Features
+User Management: User registration, editing, deletion, and viewing.
+Role Management: Definition of roles with hierarchy, assignment of abilities to roles.
+Access Control Based on Abilities: Access to specific parts of the system based on abilities associated with user roles.
+Role Hierarchy: Access restriction for users with lower hierarchy in relation to users with higher hierarchy.
+
+Installation Requirements
+1. Clone the repository.
+
+2. Install dependencies using Composer, Node:
+	-- composer install
+	-- npm run build
+
+3. Configure the .env file with the database information.
+4. Run database migrations to create the necessary tables:
+	-- php artisan migrate
+
+5. Start the local server:
+	-- php artisan serve
+
+6. Access the application in the browser using the address provided by the local server.
+
+Contributing
+Contributions are welcome! Feel free to open an issue to report bugs, suggest improvements, or to submit a pull request.
+
+
+Descrição
+Esta é uma aplicação web construída utilizando o framework Laravel e o componente Livewire. A aplicação gerencia usuários, roles e habilidades, permitindo que determinados usuários tenham acesso a diferentes partes do sistema com base em suas habilidades associadas às suas roles. Além disso, as roles possuem uma hierarquia, garantindo que usuários com uma hierarquia inferior não possam alterar dados de usuários com hierarquia superior.
+
+Tecnologias Utilizadas
+PHP
+Laravel
+Livewire
+Banco de Dados (MySQL, PostgreSQL, etc.)
+Funcionalidades Principais
+Gerenciamento de Usuários: Cadastro, edição, exclusão e visualização de usuários.
+Gerenciamento de Roles: Definição de roles com hierarquia, atribuição de habilidades às roles.
+Controle de Acesso Baseado em Habilidades: Acesso a partes específicas do sistema com base nas habilidades associadas às roles do usuário.
+Hierarquia de Roles: Restrição de acesso para usuários com hierarquia inferior em relação a usuários com hierarquia superior.
+Requisitos de Instalação
+1. Clone o repositório.
+2. Instale as dependências usando Composer, NPM:
+-- composer install
+-- npm run dev
+
+3. Configure o arquivo .env com as informações do banco de dados.
+4. Execute as migrações do banco de dados para criar as tabelas necessárias:
+
+-- php artisan migrate
+
+5. Inicie o servidor local:
+
+-- php artisan serve
+
+6. Acesse a aplicação no navegador usando o endereço fornecido pelo servidor local.
+
+Contribuindo
+
+Contribuições são bem-vindas! Sinta-se à vontade para abrir uma issue para relatar bugs, sugestões de melhorias ou para enviar um pull request.

app/Http/Controllers/Auth/VerifyEmailController.php

@@ -0,0 +1,27 @@
+<?php
+
+namespace App\Http\Controllers\Auth;
+
+use App\Http\Controllers\Controller;
+use Illuminate\Auth\Events\Verified;
+use Illuminate\Foundation\Auth\EmailVerificationRequest;
+use Illuminate\Http\RedirectResponse;
+
+class VerifyEmailController extends Controller
+{
+    /**
+     * Mark the authenticated user's email address as verified.
+     */
+    public function __invoke(EmailVerificationRequest $request): RedirectResponse
+    {
+        if ($request->user()->hasVerifiedEmail()) {
+            return redirect()->intended(route('dashboard', absolute: false) . '?verified=1');
+        }
+
+        if ($request->user()->markEmailAsVerified()) {
+            event(new Verified($request->user()));
+        }
+
+        return redirect()->intended(route('dashboard', absolute: false) . '?verified=1');
+    }
+}

app/Http/Controllers/Controller.php

@@ -0,0 +1,8 @@
+<?php
+
+namespace App\Http\Controllers;
+
+abstract class Controller
+{
+    //
+}

app/Http/Middleware/CheckRoleHierarchy.php

@@ -0,0 +1,25 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use App\Models\Role;
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class CheckRoleHierarchy
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        if ($request->user()->roles()->pluck('hierarchy')->max() <= Role::find($request->route('id'))->hierarchy) {
+            return $next($request);
+        } else {
+            abort(403);
+        }
+    }
+}

app/Http/Middleware/CheckUserHierarchy.php

@@ -0,0 +1,24 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Symfony\Component\HttpFoundation\Response;
+
+class CheckUserHierarchy
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
+     */
+    public function handle(Request $request, Closure $next): Response
+    {
+        if ($request->user()->hierarchy($request->route('id'))) { /** @phpstan-ignore-line */
+            return $next($request);
+        } else {
+            abort(403);
+        }
+    }
+}

app/Livewire/Ability/AbilityRole.php

@@ -0,0 +1,35 @@
+<?php
+
+namespace App\Livewire\Ability;
+
+use App\Models\{Ability, Role};
+use Illuminate\Contracts\View\View;
+use Livewire\Component;
+
+class AbilityRole extends Component
+{
+    public ?Role $role;
+
+    public Object $abilities;
+
+    public function mount(int $id): void
+    {
+        $this->role      = Role::find($id);
+        $this->abilities = Ability::all();
+    }
+
+    public function render(): View
+    {
+        return view('livewire.ability.ability-role');
+    }
+
+    public function toggleAbility(int $abilityId): void
+    {
+        $this->role->abilities()->toggle($abilityId);
+    }
+
+    public function goBack(): void
+    {
+        $this->redirectRoute('roles');
+    }
+}

app/Livewire/Actions/Logout.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace App\Livewire\Actions;
+
+use Illuminate\Support\Facades\{Auth, Session};
+
+class Logout
+{
+    /**
+     * Log the current user out of the application.
+     */
+    public function __invoke(): void
+    {
+        Auth::guard('web')->logout();
+
+        Session::invalidate();
+        Session::regenerateToken();
+    }
+}

app/Livewire/Dashboard.php

@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Livewire;
+
+use Illuminate\Contracts\View\View;
+use Livewire\Component;
+
+class Dashboard extends Component
+{
+    public function render(): View
+    {
+        return view('livewire.dashboard');
+    }
+}