permissions refactoring

app/Http/Controllers/Admin/UserManagementController.php

@@ -2,8 +2,9 @@
 
 namespace App\Http\Controllers\Admin;
 
+use App\Actions\Permissions\PermissionService;
 use App\Http\Controllers\Controller;
-use App\Http\Requests\Admin\UpdateUserAdminStatusRequest;
+use App\Http\Requests\Admin\SyncUserGlobalPermissionsRequest;
 use App\Models\User;
 use Illuminate\Http\RedirectResponse;
 use Illuminate\Support\Arr;
@@ -12,28 +13,30 @@ use Inertia\Response;
 
 class UserManagementController extends Controller
 {
+    public function __construct(
+        private readonly PermissionService $permissionService,
+    ) {}
+
     public function index(): Response
     {
         return Inertia::render('admin/users/Index', [
+            'directPermissions' => $this->permissionService->assignmentMap(User::class),
+            'permissionOptions' => $this->permissionService->permissionOptions(User::class, null),
             'status' => session('status'),
             'users' => User::query()
-                ->orderByDesc('is_admin')
                 ->orderBy('name')
                 ->get(),
         ]);
     }
 
-    public function update(UpdateUserAdminStatusRequest $request, User $user): RedirectResponse
+    public function update(SyncUserGlobalPermissionsRequest $request, User $user): RedirectResponse
     {
         $validated = $request->validated();
-        $user->forceFill([
-            'is_admin' => Arr::get($validated, 'is_admin'),
-        ])->save();
+        $permissions = Arr::get($validated, 'permissions', []);
 
-        $status = $user->is_admin
-            ? "{$user->name} now has admin access."
-            : "{$user->name} no longer has admin access.";
+        $this->permissionService->sync($user, null, $permissions);
 
-        return to_route('admin.users.index')->with('status', $status);
+        return to_route('admin.users.index')
+            ->with('status', "{$user->name} global permissions were updated.");
     }
 }