snapshot of https://github.com/krayin/laravel-crm.git (2.2, 2026-09-18; blobs > 131072B omitted)

packages/Webkul/Admin/src/Http/Controllers/Controller.php

@@ -0,0 +1,67 @@
+<?php
+
+namespace Webkul\Admin\Http\Controllers;
+
+use Illuminate\Foundation\Auth\Access\AuthorizesRequests;
+use Illuminate\Foundation\Bus\DispatchesJobs;
+use Illuminate\Foundation\Validation\ValidatesRequests;
+use Illuminate\Http\Response;
+use Illuminate\Routing\Controller as BaseController;
+
+class Controller extends BaseController
+{
+    use AuthorizesRequests, DispatchesJobs, ValidatesRequests;
+
+    /**
+     * Display a listing of the resource.
+     *
+     * @return Response
+     */
+    public function redirectToLogin()
+    {
+        return redirect()->route('admin.session.create');
+    }
+
+    /**
+     * Prevent access to a record that is not owned by (or shared with) the current user.
+     *
+     * @param  int|array|null  $ownerIds  The user id (or ids, e.g. owner + participants) tied to the record.
+     * @return void
+     */
+    protected function preventUnauthorizedAccess($ownerIds)
+    {
+        $userIds = bouncer()->getAuthorizedUserIds();
+
+        if ($userIds === null) {
+            return;
+        }
+
+        if (empty(array_intersect((array) $ownerIds, $userIds))) {
+            abort(401, trans('admin::app.errors.unauthorized'));
+        }
+    }
+
+    /**
+     * Filter a collection of records down to the ones the current user is authorized to manage.
+     *
+     * @param  Collection  $records
+     * @param  callable|null  $ownerIdsResolver  Resolves the owning user id(s) for a record; defaults to `user_id`.
+     * @return Collection
+     */
+    protected function filterAuthorizedRecords($records, ?callable $ownerIdsResolver = null)
+    {
+        $userIds = bouncer()->getAuthorizedUserIds();
+
+        if ($userIds === null) {
+            return $records;
+        }
+
+        return $records->filter(function ($record) use ($userIds, $ownerIdsResolver) {
+            $ownerIds = $ownerIdsResolver
+                ? (array) $ownerIdsResolver($record)
+                : [$record->user_id];
+
+            return ! empty(array_intersect($ownerIds, $userIds));
+        })->values();
+    }
+}