39 lines
1.1 KiB
PHP
39 lines
1.1 KiB
PHP
<?php
|
|
|
|
namespace Pterodactyl\Transformers;
|
|
|
|
use League\Fractal\TransformerAbstract;
|
|
use Pterodactyl\Exceptions\PterodactylException;
|
|
|
|
abstract class ApiTransformer extends TransformerAbstract
|
|
{
|
|
/**
|
|
* @var \Illuminate\Http\Request
|
|
*/
|
|
protected $request;
|
|
|
|
/**
|
|
* Determine if an API key from the request has permission to access
|
|
* a resource. This is used when loading includes on the transformed
|
|
* models.
|
|
*
|
|
* @param string $permission
|
|
* @return bool
|
|
*
|
|
* @throws \Pterodactyl\Exceptions\PterodactylException
|
|
*/
|
|
protected function authorize(string $permission): bool
|
|
{
|
|
/** @var \Pterodactyl\Models\APIKey $model */
|
|
$model = $this->request->attributes->get('api_key');
|
|
if (! $model->relationLoaded('permissions')) {
|
|
throw new PterodactylException('Permissions must be loaded onto a model before passing to transformer authorize function.');
|
|
}
|
|
|
|
$count = $model->getRelation('permissions')->filter(function ($model) use ($permission) {
|
|
return $model->permission === $permission;
|
|
})->count();
|
|
|
|
return $count > 0;
|
|
}
|
|
}
|