mirror of
https://github.com/invoiceninja/invoiceninja.git
synced 2025-05-24 02:14:21 -04:00
6df62faa82
* fixes for tests * Working on Invoice Designs * Update phpunit.yml * Update phpunit.yml * Working on sending an individual email * Update phpunit.yml * Fixes for designs * Update phpunit.yml * Working on sending entity email - individual * Fixes for account creation * Remove Laravel Horizon * remove logging
89 lines
2.2 KiB
PHP
89 lines
2.2 KiB
PHP
<?php
|
|
/**
|
|
* Invoice Ninja (https://invoiceninja.com)
|
|
*
|
|
* @link https://github.com/invoiceninja/invoiceninja source repository
|
|
*
|
|
* @copyright Copyright (c) 2020. Invoice Ninja LLC (https://invoiceninja.com)
|
|
*
|
|
* @license https://opensource.org/licenses/AAL
|
|
*/
|
|
|
|
namespace App\Http\Requests\Email;
|
|
|
|
use App\Http\Requests\Request;
|
|
|
|
class SendEmailRequest extends Request
|
|
{
|
|
|
|
/**
|
|
* Determine if the user is authorized to make this request.
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function authorize() : bool
|
|
{
|
|
return $this->checkUserAbleToSend();
|
|
}
|
|
|
|
/**
|
|
* Get the validation rules that apply to the request.
|
|
*
|
|
* @return array
|
|
*/
|
|
public function rules()
|
|
{
|
|
return [
|
|
"template" => "required",
|
|
"entity" => "required",
|
|
"entity_id" => "required",
|
|
"subject" => "required",
|
|
"body" => "required",
|
|
];
|
|
}
|
|
|
|
protected function prepareForValidation()
|
|
{
|
|
$input = $this->all();
|
|
|
|
$settings = auth()->user()->company()->settings;
|
|
|
|
if(!property_exists($settings, $template))
|
|
unset($input['template']);
|
|
|
|
$this->replace($input);
|
|
}
|
|
|
|
public function message()
|
|
{
|
|
return [
|
|
'template' => 'Invalid template.',
|
|
];
|
|
}
|
|
|
|
private function checkUserAbleToSend()
|
|
{
|
|
$input = $this->all();
|
|
|
|
/*Make sure we have all the require ingredients to send a template*/
|
|
if(array_key_exists('entity', $input) && array_key_exists('entity_id', $input) && is_string($input['entity']) && is_string($input['entity_id'])) {
|
|
|
|
$company = auth()->user()->company();
|
|
|
|
$entity = ucfirst($input['entity']);
|
|
|
|
$class = "App\Models\\$entity";
|
|
|
|
/* Harvest the entity*/
|
|
$entity_obj = $class::whereId($this->decodePrimaryKey($input['entity_id']))->company()->first();
|
|
|
|
/* Check object, check user and company id is same as users, and check user can edit the object */
|
|
if($entity_obj && ($company->id == $entity_obj->company_id) && auth()->user()->can('edit', $entity_obj))
|
|
return true;
|
|
|
|
}
|
|
|
|
return false;
|
|
}
|
|
}
|