glastree/app/Models/User.php

<?php

namespace App\Models;

use Illuminate\Database\Eloquent\Attributes\Fillable;
use Illuminate\Database\Eloquent\Attributes\Hidden;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Database\Eloquent\Relations\BelongsTo;
use Illuminate\Database\Eloquent\Relations\HasMany;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;

#[Fillable(['name', 'email', 'password', 'tenant_id', 'is_admin', 'permissions', 'role_preset_id', 'status'])]
#[Hidden(['password', 'remember_token'])]
class User extends Authenticatable
{
    use HasFactory, Notifiable;

    protected $fillable = ['name', 'email', 'password', 'tenant_id', 'is_admin', 'permissions', 'role_preset_id', 'status'];

    protected function casts(): array
    {
        return [
            'email_verified_at' => 'datetime',
            'password' => 'hashed',
            'is_admin' => 'boolean',
            'permissions' => 'array',
            'status' => 'string',
        ];
    }

    public const STATUS_ACTIVE = 'active';
    public const STATUS_SUSPENDED = 'suspended';
    public const STATUS_PENDING = 'pending';

    public const MODULES = ['individui', 'gruppi', 'eventi', 'documenti', 'mailing', 'viste', 'report'];
    public const LEVEL_NONE = 0;
    public const LEVEL_READ = 1;
    public const LEVEL_FULL = 2;

    public function tenant(): BelongsTo
    {
        return $this->belongsTo(Tenant::class);
    }

    public function rolePreset(): BelongsTo
    {
        return $this->belongsTo(RolePreset::class);
    }

    public function notifiche(): HasMany
    {
        return $this->hasMany(Notifica::class)->orderBy('created_at', 'desc');
    }

    public function unreadNotifiche(): HasMany
    {
        return $this->hasMany(Notifica::class)->where('is_read', false)->orderBy('created_at', 'desc');
    }

    public function unreadNotificheCount(): int
    {
        return $this->notifiche()->unread()->count();
    }

    public function activityLogs(): HasMany
    {
        return $this->hasMany(ActivityLog::class)->orderBy('created_at', 'desc');
    }

    public function isSuperAdmin(): bool
    {
        return $this->is_admin === true;
    }

    public static function firstUserIsAdmin(): bool
    {
        return self::count() === 1;
    }

    public function isActive(): bool
    {
        return $this->status !== self::STATUS_SUSPENDED;
    }

    public function getPermission(string $module): int
    {
        if ($this->isSuperAdmin()) {
            return self::LEVEL_FULL;
        }

        return $this->permissions[$module] ?? self::LEVEL_NONE;
    }

    public function hasPermission(string $module, int $level = self::LEVEL_READ): bool
    {
        return $this->getPermission($module) >= $level;
    }

    public function canAccess(string $module): bool
    {
        return $this->getPermission($module) >= self::LEVEL_READ;
    }

    public function canManage(string $module): bool
    {
        return $this->getPermission($module) >= self::LEVEL_FULL;
    }

    public function canRead(string $module): bool
    {
        return $this->getPermission($module) >= self::LEVEL_READ;
    }

    public function canWrite(string $module): bool
    {
        return $this->getPermission($module) >= self::LEVEL_FULL;
    }

    public function canDelete(string $module): bool
    {
        return $this->getPermission($module) >= self::LEVEL_FULL;
    }

    public function setPermission(string $module, int $level): self
    {
        $permissions = $this->permissions ?? [];
        $permissions[$module] = $level;
        $this->permissions = $permissions;
        return $this;
    }

    public function setPermissions(array $permissions): self
    {
        $this->permissions = $permissions;
        return $this;
    }

    public function getPermissionsSummary(): array
    {
        $result = [];
        foreach (self::MODULES as $module) {
            $level = $this->getPermission($module);
            $result[$module] = match ($level) {
                self::LEVEL_NONE => 'Nessuno',
                self::LEVEL_READ => 'Lettura',
                self::LEVEL_FULL => 'Completo',
            };
        }
        return $result;
    }

    public function applyRolePreset(RolePreset $preset): self
    {
        $this->role_preset_id = $preset->id;
        $this->permissions = $preset->permissions;
        return $this;
    }
}