36 lines
812 B
PHP
36 lines
812 B
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace App\Mcp\Concerns;
|
||
|
|
|
||
|
|
use Laravel\Mcp\Request;
|
||
|
|
use Laravel\Mcp\Response;
|
||
|
|
|
||
|
|
trait ResolvesTeam
|
||
|
|
{
|
||
|
|
protected function ensureAbility(Request $request, string $ability = 'read'): ?Response
|
||
|
|
{
|
||
|
|
$user = $request->user();
|
||
|
|
if (! $user) {
|
||
|
|
return Response::error('Unauthenticated.');
|
||
|
|
}
|
||
|
|
|
||
|
|
$token = $user->currentAccessToken();
|
||
|
|
if (! $token) {
|
||
|
|
return Response::error('Invalid token.');
|
||
|
|
}
|
||
|
|
|
||
|
|
if ($token->can('root') || $token->can($ability)) {
|
||
|
|
return null;
|
||
|
|
}
|
||
|
|
|
||
|
|
return Response::error("Missing required permissions: {$ability}");
|
||
|
|
}
|
||
|
|
|
||
|
|
protected function resolveTeamId(Request $request): ?int
|
||
|
|
{
|
||
|
|
$token = $request->user()?->currentAccessToken();
|
||
|
|
|
||
|
|
return $token?->team_id;
|
||
|
|
}
|
||
|
|
}
|