0149-job-policy

Author: piotrjura

job-board/app/Http/Controllers/JobApplicationController.php

@@ -9,11 +9,13 @@ class JobApplicationController extends Controller
 {
     public function create(Job $job)
     {
+        $this->authorize('apply', $job);
         return view('job_application.create', ['job' => $job]);
     }
 
     public function store(Job $job, Request $request)
     {
+        $this->authorize('apply', $job);
         $job->jobApplications()->create([
             'user_id' => $request->user()->id,
             ...$request->validate([

job-board/app/Policies/JobPolicy.php

@@ -0,0 +1,71 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\Job;
+use App\Models\User;
+use Illuminate\Auth\Access\Response;
+
+class JobPolicy
+{
+    /**
+     * Determine whether the user can view any models.
+     */
+    public function viewAny(?User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     */
+    public function view(?User $user, Job $job): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     */
+    public function create(User $user): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     */
+    public function update(User $user, Job $job): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     */
+    public function delete(User $user, Job $job): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     */
+    public function restore(User $user, Job $job): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     */
+    public function forceDelete(User $user, Job $job): bool
+    {
+        return false;
+    }
+
+    public function apply(User $user, Job $job): bool
+    {
+        return false;
+    }
+}

job-board/resources/views/job/show.blade.php

@@ -5,6 +5,10 @@
     <p class="mb-4 text-sm text-slate-500">
       {!! nl2br(e($job->description)) !!}
     </p>
+
+    <x-link-button :href="route('job.application.create', $job)">
+      Apply
+    </x-link-button>
   </x-job-card>
 
   <x-card class="mb-4">