Add RoutingRelatedPolicies

Yoyasp · Yoyasp · commit c66580a74eb6 · 2026-06-03T14:00:44.000+02:00
diff --git a/app/Policies/MplsLspPathPolicy.php b/app/Policies/MplsLspPathPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class MplsLspPathPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/MplsLspPolicy.php b/app/Policies/MplsLspPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class MplsLspPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/MplsSapPolicy.php b/app/Policies/MplsSapPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class MplsSapPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/MplsSdpBindPolicy.php b/app/Policies/MplsSdpBindPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class MplsSdpBindPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/MplsSdpPolicy.php b/app/Policies/MplsSdpPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class MplsSdpPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/MplsServicePolicy.php b/app/Policies/MplsServicePolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class MplsServicePolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/MplsTunnelArHopPolicy.php b/app/Policies/MplsTunnelArHopPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class MplsTunnelArHopPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/MplsTunnelCHopPolicy.php b/app/Policies/MplsTunnelCHopPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class MplsTunnelCHopPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/OspfAreaPolicy.php b/app/Policies/OspfAreaPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class OspfAreaPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/OspfInstancePolicy.php b/app/Policies/OspfInstancePolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class OspfInstancePolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/OspfNbrPolicy.php b/app/Policies/OspfNbrPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class OspfNbrPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/OspfPortPolicy.php b/app/Policies/OspfPortPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class OspfPortPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/Ospfv3AreaPolicy.php b/app/Policies/Ospfv3AreaPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class Ospfv3AreaPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/Ospfv3InstancePolicy.php b/app/Policies/Ospfv3InstancePolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class Ospfv3InstancePolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/Ospfv3NbrPolicy.php b/app/Policies/Ospfv3NbrPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class Ospfv3NbrPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/Ospfv3PortPolicy.php b/app/Policies/Ospfv3PortPolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class Ospfv3PortPolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/PseudowirePolicy.php b/app/Policies/PseudowirePolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class PseudowirePolicy extends RoutingRelatedPolicy
+{
+}
diff --git a/app/Policies/RoutingRelatedPolicy.php b/app/Policies/RoutingRelatedPolicy.php
@@ -0,0 +1,35 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\User;
+
+/**
+ * Shared policy for routing-scoped resources (MPLS, OSPF, VRF, ...).
+ *
+ * Authorization is governed entirely by the global `routing` permission set;
+ * row-level device access is enforced by each model's query scope, not here.
+ * Concrete per-model policies extend this so Laravel can resolve them by the
+ * `<Model>Policy` naming convention.
+ */
+abstract class RoutingRelatedPolicy
+{
+    use ChecksGlobalPermissions;
+
+    public function __construct()
+    {
+        $this->globalPrefix = 'routing';
+    }
+
+    public function viewAny(User $user): bool
+    {
+        return $this->hasGlobalPermission($user, 'view')
+            || $this->hasGlobalPermission($user, 'viewAll')
+            || $this->hasGlobalPermission($user, 'update');
+    }
+
+    public function view(User $user): bool
+    {
+        return $this->hasGlobalPermission($user, 'view');
+    }
+}
diff --git a/app/Policies/VrfLitePolicy.php b/app/Policies/VrfLitePolicy.php
@@ -0,0 +1,7 @@
+<?php
+
+namespace App\Policies;
+
+class VrfLitePolicy extends RoutingRelatedPolicy
+{
+}

-Original file line number
+Diff line change
@@ @@ -0,0 +1,7 @@ @@
 +<?php
++
 +namespace App\Policies;
++
 +class MplsLspPathPolicy extends RoutingRelatedPolicy
 +{
 +}