permissions refactoring

app/Http/Requests/Admin/SyncUserGlobalPermissionsRequest.php

@@ -2,10 +2,12 @@
 
 namespace App\Http\Requests\Admin;
 
+use App\Enums\Permission;
 use Illuminate\Contracts\Validation\ValidationRule;
 use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
 
-class UpdateUserAdminStatusRequest extends FormRequest
+class SyncUserGlobalPermissionsRequest extends FormRequest
 {
     /**
      * Determine if the user is authorized to make this request.
@@ -23,7 +25,12 @@ class UpdateUserAdminStatusRequest extends FormRequest
     public function rules(): array
     {
         return [
-            'is_admin' => ['required', 'boolean'],
+            'permissions' => ['nullable', 'array'],
+            'permissions.*' => [
+                'string',
+                'distinct',
+                Rule::in(Permission::values(Permission::globalAssignable())),
+            ],
         ];
     }
 }

app/Http/Requests/DeleteProjectRequest.php

@@ -11,7 +11,7 @@ class DeleteProjectRequest extends FormRequest
 {
     public function authorize(): bool
     {
-        return $this->user() !== null;
+        return $this->user()?->can('access-admin') ?? false;
     }
 
     /**

app/Http/Requests/StoreProjectRequest.php

@@ -14,7 +14,7 @@ class StoreProjectRequest extends FormRequest
      */
     public function authorize(): bool
     {
-        return $this->user() !== null;
+        return $this->user()?->can('create-project') ?? false;
     }
 
     protected function prepareForValidation(): void

app/Http/Requests/SyncProjectPermissionsRequest.php

@@ -2,7 +2,7 @@
 
 namespace App\Http\Requests;
 
-use App\Actions\ProjectPermissions\ProjectPermissionService;
+use App\Enums\Permission;
 use Illuminate\Contracts\Validation\ValidationRule;
 use Illuminate\Foundation\Http\FormRequest;
 use Illuminate\Validation\Rule;
@@ -29,7 +29,7 @@ class SyncProjectPermissionsRequest extends FormRequest
             'permissions.*' => [
                 'string',
                 'distinct',
-                Rule::in(ProjectPermissionService::permissions()),
+                Rule::in(Permission::values(Permission::projectAssignable())),
             ],
         ];
     }

app/Http/Requests/SyncTeamUserPermissionsRequest.php

@@ -0,0 +1,36 @@
+<?php
+
+namespace App\Http\Requests;
+
+use App\Enums\Permission;
+use Illuminate\Contracts\Validation\ValidationRule;
+use Illuminate\Foundation\Http\FormRequest;
+use Illuminate\Validation\Rule;
+
+class SyncTeamUserPermissionsRequest extends FormRequest
+{
+    /**
+     * Determine if the user is authorized to make this request.
+     */
+    public function authorize(): bool
+    {
+        return $this->user() !== null;
+    }
+
+    /**
+     * Get the validation rules that apply to the request.
+     *
+     * @return array<string, ValidationRule|array<mixed>|string>
+     */
+    public function rules(): array
+    {
+        return [
+            'permissions' => ['nullable', 'array'],
+            'permissions.*' => [
+                'string',
+                'distinct',
+                Rule::in(Permission::values(Permission::teamAssignable())),
+            ],
+        ];
+    }
+}

app/Http/Requests/UpdateTeamMembersRequest.php

@@ -13,7 +13,7 @@ class UpdateTeamMembersRequest extends FormRequest
      */
     public function authorize(): bool
     {
-        return $this->user()?->can('access-admin') ?? false;
+        return $this->user() !== null;
     }
 
     /**