f0bb80707a
Mirrors the frontend catch-up in 570f17e: a substantial amount of
finished-but-never-committed backend work had accumulated locally.
- New CustomField module: admin-managed field definitions per client,
reorderable, typed values stored per client (backing the frontend's
ClientCustomFieldCard + settings/fields page)
- History entries switch from a hardcoded type enum to a dynamic,
admin-managed HistoryType module (reorderable, backing
settings/history-types)
- New Import module: CSV client import (backing settings/import)
- Clients table gains soft deletes (deleted_at)
- Supporting factories, seeders, policies, and feature tests for all
of the above
All 63 backend tests pass locally before this commit.
25 lines
777 B
PHP
25 lines
777 B
PHP
<?php
|
|
|
|
namespace App\Modules\History\Policies;
|
|
|
|
use App\Models\User;
|
|
use App\Modules\History\Models\HistoryEntry;
|
|
|
|
class HistoryEntryPolicy
|
|
{
|
|
public function viewAny(User $user): bool { return true; }
|
|
public function create(User $user): bool { return true; }
|
|
|
|
// Only the entry's author may edit their own note; auto-generated change
|
|
// entries are read-only audit records and cannot be edited by anyone.
|
|
public function update(User $user, HistoryEntry $entry): bool
|
|
{
|
|
return ! $entry->isFieldChange() && $user->id === $entry->author_id;
|
|
}
|
|
|
|
// Only admins may delete Verlauf entries (manual notes and change entries alike).
|
|
public function delete(User $user, HistoryEntry $entry): bool
|
|
{
|
|
return $user->isAdmin();
|
|
}
|
|
}
|