permissions refactoring

app/Models/PermissionAssignment.php

@@ -0,0 +1,37 @@
+<?php
+
+namespace App\Models;
+
+use App\Enums\Permission;
+use Database\Factories\PermissionAssignmentFactory;
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\MorphTo;
+
+#[Fillable(['permission', 'assignee_type', 'assignee_id', 'scope_type', 'scope_id'])]
+class PermissionAssignment extends Model
+{
+    /** @use HasFactory<PermissionAssignmentFactory> */
+    use HasFactory;
+
+    /**
+     * @return array<string, string>
+     */
+    protected function casts(): array
+    {
+        return [
+            'permission' => Permission::class,
+        ];
+    }
+
+    public function assignee(): MorphTo
+    {
+        return $this->morphTo();
+    }
+
+    public function scope(): MorphTo
+    {
+        return $this->morphTo();
+    }
+}

app/Models/Project.php

@@ -8,6 +8,7 @@ use Illuminate\Database\Eloquent\Casts\Attribute;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\Relations\MorphMany;
 use Illuminate\Support\Str;
 
 #[Fillable(['name', 'key'])]
@@ -16,6 +17,13 @@ class Project extends Model
     /** @use HasFactory<ProjectFactory> */
     use HasFactory;
 
+    protected static function booted(): void
+    {
+        static::deleting(function (self $project): void {
+            $project->permissionAssignments()->delete();
+        });
+    }
+
     protected function key(): Attribute
     {
         return Attribute::make(
@@ -23,6 +31,11 @@ class Project extends Model
         );
     }
 
+    public function permissionAssignments(): MorphMany
+    {
+        return $this->morphMany(PermissionAssignment::class, 'scope');
+    }
+
     public function boardColumns(): HasMany
     {
         return $this->hasMany(BoardColumn::class)

app/Models/Team.php

@@ -7,6 +7,7 @@ use Illuminate\Database\Eloquent\Attributes\Fillable;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Model;
 use Illuminate\Database\Eloquent\Relations\BelongsToMany;
+use Illuminate\Database\Eloquent\Relations\MorphMany;
 
 #[Fillable(['name'])]
 class Team extends Model
@@ -14,6 +15,24 @@ class Team extends Model
     /** @use HasFactory<TeamFactory> */
     use HasFactory;
 
+    protected static function booted(): void
+    {
+        static::deleting(function (self $team): void {
+            $team->permissionAssignments()->delete();
+            $team->scopedPermissionAssignments()->delete();
+        });
+    }
+
+    public function permissionAssignments(): MorphMany
+    {
+        return $this->morphMany(PermissionAssignment::class, 'assignee');
+    }
+
+    public function scopedPermissionAssignments(): MorphMany
+    {
+        return $this->morphMany(PermissionAssignment::class, 'scope');
+    }
+
     public function users(): BelongsToMany
     {
         return $this->belongsToMany(User::class)

app/Models/User.php

@@ -9,6 +9,7 @@ use Illuminate\Database\Eloquent\Attributes\Hidden;
 use Illuminate\Database\Eloquent\Factories\HasFactory;
 use Illuminate\Database\Eloquent\Relations\BelongsToMany;
 use Illuminate\Database\Eloquent\Relations\HasMany;
+use Illuminate\Database\Eloquent\Relations\MorphMany;
 use Illuminate\Foundation\Auth\User as Authenticatable;
 use Illuminate\Notifications\Notifiable;
 use Laravel\Fortify\TwoFactorAuthenticatable;
@@ -20,6 +21,13 @@ class User extends Authenticatable
     /** @use HasFactory<UserFactory> */
     use HasFactory, Notifiable, TwoFactorAuthenticatable;
 
+    protected static function booted(): void
+    {
+        static::deleting(function (self $user): void {
+            $user->permissionAssignments()->delete();
+        });
+    }
+
     /**
      * Get the attributes that should be cast.
      *
@@ -29,12 +37,16 @@ class User extends Authenticatable
     {
         return [
             'email_verified_at' => 'datetime',
-            'is_admin' => 'boolean',
             'password' => 'hashed',
             'two_factor_confirmed_at' => 'datetime',
         ];
     }
 
+    public function permissionAssignments(): MorphMany
+    {
+        return $this->morphMany(PermissionAssignment::class, 'assignee');
+    }
+
     public function teams(): BelongsToMany
     {
         return $this->belongsToMany(Team::class)