File transfer

app/Addons/AdvancedAdmin/Http/Controllers/Admin/RoleController.php

@@ -0,0 +1,71 @@
+<?php
+
+/**
+ * @author  Ball Studios <https://git.balls.studio>
+ * @license MIT
+ */
+
+namespace Pterodactyl\Addons\AdvancedAdmin\Http\Controllers\Admin;
+
+use Illuminate\Http\JsonResponse;
+use Illuminate\Http\Request;
+use Illuminate\Routing\Controller;
+use Pterodactyl\Addons\AdvancedAdmin\Http\Requests\Roles\CreateRoleRequest;
+use Pterodactyl\Addons\AdvancedAdmin\Http\Requests\Roles\UpdateRoleRequest;
+use Pterodactyl\Addons\AdvancedAdmin\Http\Resources\RoleResource;
+use Pterodactyl\Addons\AdvancedAdmin\Models\Role;
+use Pterodactyl\Addons\AdvancedAdmin\Services\Roles\RoleService;
+
+class RoleController extends Controller
+{
+    public function __construct(private readonly RoleService $roleService) {}
+
+    /** GET /api/application/addons/roles */
+    public function index(Request $request): JsonResponse
+    {
+        $this->authorizeAdmin($request);
+
+        $roles = Role::with('permissions')
+            ->orderByDesc('priority')
+            ->paginate(50);
+
+        return RoleResource::collection($roles)->response();
+    }
+
+    /** GET /api/application/addons/roles/{role} */
+    public function show(Request $request, Role $role): JsonResponse
+    {
+        $this->authorizeAdmin($request);
+        return (new RoleResource($role->load('permissions')))->response();
+    }
+
+    /** POST /api/application/addons/roles */
+    public function store(CreateRoleRequest $request): JsonResponse
+    {
+        $this->authorizeAdmin($request);
+        $role = $this->roleService->create($request->validated(), $request->user()->id);
+        return (new RoleResource($role->load('permissions')))->response()->setStatusCode(201);
+    }
+
+    /** PATCH /api/application/addons/roles/{role} */
+    public function update(UpdateRoleRequest $request, Role $role): JsonResponse
+    {
+        $this->authorizeAdmin($request);
+        $updated = $this->roleService->update($role, $request->validated(), $request->user()->id);
+        return (new RoleResource($updated->load('permissions')))->response();
+    }
+
+    /** DELETE /api/application/addons/roles/{role} */
+    public function destroy(Request $request, Role $role): JsonResponse
+    {
+        $this->authorizeAdmin($request);
+        $force = (bool) $request->boolean('force', false);
+        $this->roleService->delete($role, $request->user()->id, $force);
+        return response()->json(['deleted' => true]);
+    }
+
+    private function authorizeAdmin(Request $request): void
+    {
+        abort_unless($request->user() && $request->user()->root_admin, 403, 'Admin access required.');
+    }
+}