[9.x] Searchable authorization (#797)

Author: duncanmcclean

src/Search/Searchable.php

@@ -93,6 +93,11 @@ public function getCpSearchResultBadge(): string
         return $this->resource->name();
     }
 
+    public function getCpSearchResultIcon(): string
+    {
+        return $this->resource->icon();
+    }
+
     public function newAugmentedInstance(): Augmented
     {
         foreach ($this->supplements as $key => $value) {

src/Search/SearchablePolicy.php

@@ -0,0 +1,11 @@
+<?php
+
+namespace StatamicRadPack\Runway\Search;
+
+class SearchablePolicy
+{
+    public function view($user, Searchable $searchable)
+    {
+        return $user->can('view', [$searchable->resource(), $searchable->model()]);
+    }
+}

src/ServiceProvider.php

@@ -152,6 +152,11 @@ protected function registerPermissions(): self
             }
         });
 
+        Gate::policy(
+            \StatamicRadPack\Runway\Search\Searchable::class,
+            \StatamicRadPack\Runway\Search\SearchablePolicy::class
+        );
+
         return $this;
     }
 

tests/Search/SearchablePolicyTest.php

@@ -0,0 +1,48 @@
+<?php
+
+namespace StatamicRadPack\Runway\Tests\Search;
+
+use PHPUnit\Framework\Attributes\Test;
+use Statamic\Facades\Role;
+use Statamic\Facades\User;
+use StatamicRadPack\Runway\Search\Searchable;
+use StatamicRadPack\Runway\Tests\Fixtures\Models\Post;
+use StatamicRadPack\Runway\Tests\TestCase;
+
+class SearchablePolicyTest extends TestCase
+{
+    #[Test]
+    public function user_with_view_permission_can_view_searchable()
+    {
+        $post = Post::factory()->create();
+        $searchable = new Searchable($post);
+
+        Role::make('test')->addPermission('view post')->save();
+        $user = User::make()->assignRole('test')->save();
+
+        $this->assertTrue($user->can('view', $searchable));
+    }
+
+    #[Test]
+    public function user_without_view_permission_cannot_view_searchable()
+    {
+        $post = Post::factory()->create();
+        $searchable = new Searchable($post);
+
+        Role::make('test')->save();
+        $user = User::make()->assignRole('test')->save();
+
+        $this->assertFalse($user->can('view', $searchable));
+    }
+
+    #[Test]
+    public function super_user_can_view_searchable()
+    {
+        $post = Post::factory()->create();
+        $searchable = new Searchable($post);
+
+        $user = User::make()->makeSuper()->save();
+
+        $this->assertTrue($user->can('view', $searchable));
+    }
+}

tests/Search/SearchableTest.php

@@ -101,6 +101,16 @@ public function can_get_cp_search_result_badge()
         $this->assertEquals('Posts', $searchable->getCpSearchResultBadge());
     }
 
+    #[Test]
+    public function can_get_cp_search_result_icon()
+    {
+        $post = Post::factory()->create();
+
+        $searchable = new Searchable($post);
+
+        $this->assertIsString($searchable->getCpSearchResultIcon());
+    }
+
     #[Test]
     public function can_get_new_augmented_instance()
     {