permissions refactoring

database/factories/PermissionAssignmentFactory.php

@@ -0,0 +1,96 @@
+<?php
+
+namespace Database\Factories;
+
+use App\Enums\Permission;
+use App\Models\PermissionAssignment;
+use App\Models\Project;
+use App\Models\User;
+use Illuminate\Database\Eloquent\Factories\Factory;
+use Illuminate\Database\Eloquent\Model;
+
+/**
+ * @extends Factory<PermissionAssignment>
+ */
+class PermissionAssignmentFactory extends Factory
+{
+    /**
+     * @return array<string, mixed>
+     */
+    public function definition(): array
+    {
+        return [
+            'permission' => Permission::ProjectRead->value,
+            'assignee_id' => User::factory(),
+            'assignee_type' => (new User)->getMorphClass(),
+            'scope_id' => Project::factory(),
+            'scope_type' => (new Project)->getMorphClass(),
+        ];
+    }
+
+    public function forAssignee(Model $assignee): static
+    {
+        return $this->state(fn (): array => [
+            'assignee_id' => $assignee->getKey(),
+            'assignee_type' => $assignee->getMorphClass(),
+        ]);
+    }
+
+    public function forScope(Model $scope): static
+    {
+        return $this->state(fn (): array => [
+            'scope_id' => $scope->getKey(),
+            'scope_type' => $scope->getMorphClass(),
+        ]);
+    }
+
+    public function global(): static
+    {
+        return $this->state(fn (): array => [
+            'scope_id' => null,
+            'scope_type' => null,
+        ]);
+    }
+
+    public function permission(Permission $permission): static
+    {
+        return $this->state(fn (): array => [
+            'permission' => $permission->value,
+        ]);
+    }
+
+    public function globalAdmin(): static
+    {
+        return $this->global()->permission(Permission::GlobalAdmin);
+    }
+
+    public function projectAdmin(): static
+    {
+        return $this->permission(Permission::ProjectAdmin);
+    }
+
+    public function projectRead(): static
+    {
+        return $this->permission(Permission::ProjectRead);
+    }
+
+    public function projectWrite(): static
+    {
+        return $this->permission(Permission::ProjectWrite);
+    }
+
+    public function teamAdmin(): static
+    {
+        return $this->permission(Permission::TeamAdmin);
+    }
+
+    public function teamInvite(): static
+    {
+        return $this->permission(Permission::TeamInvite);
+    }
+
+    public function teamManage(): static
+    {
+        return $this->permission(Permission::TeamManage);
+    }
+}

database/factories/UserFactory.php

@@ -2,6 +2,7 @@
 
 namespace Database\Factories;
 
+use App\Models\PermissionAssignment;
 use App\Models\User;
 use Illuminate\Database\Eloquent\Factories\Factory;
 use Illuminate\Support\Facades\Hash;
@@ -28,7 +29,6 @@ class UserFactory extends Factory
             'name' => fake()->name(),
             'email' => fake()->unique()->safeEmail(),
             'email_verified_at' => now(),
-            'is_admin' => false,
             'password' => static::$password ??= Hash::make('password'),
             'remember_token' => Str::random(10),
             'two_factor_secret' => null,
@@ -64,8 +64,11 @@ class UserFactory extends Factory
      */
     public function admin(): static
     {
-        return $this->state(fn (array $attributes) => [
-            'is_admin' => true,
-        ]);
+        return $this->afterCreating(function (User $user): void {
+            PermissionAssignment::factory()
+                ->forAssignee($user)
+                ->globalAdmin()
+                ->create();
+        });
     }
 }