Files
F4ilji 3860c5d24c fix(permissions): remove direct user permission sync — roles only
UpdateUserAction and CreateUserAction were calling syncPermissions()
which wrote to model_has_permissions table directly. This meant
permissions persisted even after being removed from the role.

Now users only get permissions through their roles.
2026-07-16 14:09:30 +05:00

39 lines
927 B
PHP

<?php
namespace App\Containers\Dashboard\Actions\Users;
use App\Containers\User\Models\User;
use Illuminate\Support\Str;
class CreateUserAction
{
public function run(array $data): User
{
// Генерация уникального slug
$data['slug'] = $this->generateUniqueSlug($data['name']);
$user = User::create($data);
// Назначение ролей если переданы
if (isset($data['roles']) && is_array($data['roles'])) {
$user->syncRoles($data['roles']);
}
return $user->load(['roles', 'permissions']);
}
private function generateUniqueSlug(string $name): string
{
$slug = Str::slug($name);
$count = 1;
$baseSlug = $slug;
while (User::where('slug', $slug)->exists()) {
$slug = $baseSlug . '-' . $count;
$count++;
}
return $slug;
}
}