permissions review

2026-01-14 22:41:03 +01:00
parent 8def3ee391
commit 53cca29b67
7 changed files with 40 additions and 8 deletions
@@ -9,7 +9,14 @@ class UsersPolicy
 {
    public function deleteOther(User $user): bool
    {
-        return $user->role === 1;
+        return $user->role === 1 || $user->role === 2;
+    }
+
+    public function deactivate(User $user, User $userToDeactivate): bool
+    {
+        return in_array($user->role, [1, 2])
+            && $user->role < $userToDeactivate->role
+            && $user->id !== $userToDeactivate->id;
    }

    public function validate(User $user): bool