/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle($request, Closure $next)
{
$userId = Authorizer::getResourceOwnerId();
$projectId = $request->project;
$isOwner = $this->repository->isOwner($projectId, $userId);
$isMember = $this->repository->hasMember($projectId, $userId);
if ($isOwner || $isMember) {
return $next($request);
}
return ['error' => 'Access Forbiden'];
}
public function checkProjectMember($projectId)
{
$userId = \Authorizer::getResourceOwnerId();
return $this->repository->hasMember($projectId, $userId);
}
public function checkProjectMember($projectFileId)
{
$userId = \Authorizer::getResourceOwnerId();
$projectId = $this->repository->skipPresenter()->find($projectFileId)->project_id;
return $this->projectRepository->hasMember($projectId, $userId);
}
private function isNotMember($id)
{
$userId = Authorizer::getResourceOwnerId();
return !$this->repository->hasMember($id, $userId);
}
private function checkProjectMember($project_id)
{
$user_id = Authorizer::getResourceOwnerId();
return $this->repository->hasMember($project_id, $user_id);
}
