Files
GSB-Construction/database/seeders/RolesAndPermissionsSeeder.php

80 lines
2.3 KiB
PHP

<?php
namespace Database\Seeders;
use Illuminate\Database\Seeder;
use Spatie\Permission\Models\Role;
use Spatie\Permission\Models\Permission;
class RolesAndPermissionsSeeder extends Seeder
{
/**
* Run the database seeds.
*/
public function run(): void
{
// Reset cached roles and permissions
app()[\Spatie\Permission\PermissionRegistrar::class]->forgetCachedPermissions();
// Create permissions
$permissions = [
'manage system settings',
'manage main contractors',
'manage sub contractors',
'manage users',
'assign roles',
'view all data',
'manage projects',
'view reports',
'delete data',
];
foreach ($permissions as $permission) {
Permission::firstOrCreate(['name' => $permission]);
}
// Create roles and assign created permissions
// 1. Admin (formerly SuperAdmin)
$admin = Role::firstOrCreate(['name' => 'admin']);
$admin->givePermissionTo(Permission::all());
// 2. Main Contractor Admin
$mainAdmin = Role::firstOrCreate(['name' => 'Main Contractor Admin']);
$mainAdmin->givePermissionTo([
'manage sub contractors',
'manage users',
'assign roles',
'manage projects',
'view reports',
]);
// 3. Main Contractor User
$mainUser = Role::firstOrCreate(['name' => 'Main Contractor User']);
$mainUser->givePermissionTo([
'manage projects',
// scoped visibility is handled by scopes/policies, not just permission
]);
// 4. Sub Contractor Admin
$subAdmin = Role::firstOrCreate(['name' => 'Sub Contractor Admin']);
$subAdmin->givePermissionTo([
'manage users',
'manage projects',
'view reports',
]);
// 5. Sub Contractor User
$subUser = Role::firstOrCreate(['name' => 'Sub Contractor User']);
$subUser->givePermissionTo([
'manage projects',
]);
// 6. System Employee
$employee = Role::firstOrCreate(['name' => 'employee']);
// 7. System Customer
$customer = Role::firstOrCreate(['name' => 'customer']);
}
}