F4ilji
3860c5d24c
UpdateUserAction and CreateUserAction were calling syncPermissions() which wrote to model_has_permissions table directly. This meant permissions persisted even after being removed from the role. Now users only get permissions through their roles.
50 lines
1.4 KiB
PHP
50 lines
1.4 KiB
PHP
<?php
|
|
|
|
namespace App\Containers\Dashboard\Actions\Users;
|
|
|
|
use App\Containers\User\Models\User;
|
|
use Illuminate\Support\Str;
|
|
|
|
class UpdateUserAction
|
|
{
|
|
public function run(User $user, array $data): User
|
|
{
|
|
// Генерация уникального slug при изменении имени
|
|
if (isset($data['name']) && $data['name'] !== $user->name) {
|
|
$data['slug'] = $this->generateUniqueSlug($data['name']);
|
|
}
|
|
|
|
// Если пароль пустой или null, удаляем из данных
|
|
if (empty($data['password'])) {
|
|
unset($data['password']);
|
|
}
|
|
|
|
// Извлекаем роли — они не в $fillable и не колонки таблицы
|
|
$roles = $data['roles'] ?? null;
|
|
unset($data['roles'], $data['permissions']);
|
|
|
|
$user->update($data);
|
|
|
|
// Синхронизация ролей
|
|
if ($roles !== null && is_array($roles)) {
|
|
$user->syncRoles($roles);
|
|
}
|
|
|
|
return $user->fresh(['roles', 'permissions']);
|
|
}
|
|
|
|
private function generateUniqueSlug(string $name): string
|
|
{
|
|
$slug = Str::slug($name);
|
|
$count = 1;
|
|
$baseSlug = $slug;
|
|
|
|
while (User::where('slug', $slug)->exists()) {
|
|
$slug = $baseSlug . '-' . $count;
|
|
$count++;
|
|
}
|
|
|
|
return $slug;
|
|
}
|
|
}
|