mirror of
https://github.com/invoiceninja/invoiceninja.git
synced 2025-06-22 03:11:23 -04:00
19080933b6
Shift automatically applies the Laravel coding style - which uses the PSR-2 coding style as a base with some minor additions. You may customize the code style applied by adding a [PHP CS Fixer][1] or [PHP CodeSniffer][2] ruleset to your project root. Feel free to use [Shift's Laravel ruleset][3] to help you get started. For more information on customizing the code style applied by Shift, [watch this short video][4]. [1]: https://github.com/FriendsOfPHP/PHP-CS-Fixer [2]: https://github.com/squizlabs/PHP_CodeSniffer [3]: https://gist.github.com/laravel-shift/cab527923ed2a109dda047b97d53c200 [4]: https://laravelshift.com/videos/shift-code-style
99 lines
2.5 KiB
PHP
99 lines
2.5 KiB
PHP
<?php
|
|
/**
|
|
* Invoice Ninja (https://invoiceninja.com).
|
|
*
|
|
* @link https://github.com/invoiceninja/invoiceninja source repository
|
|
*
|
|
* @copyright Copyright (c) 2022. Invoice Ninja LLC (https://invoiceninja.com)
|
|
*
|
|
* @license https://www.elastic.co/licensing/elastic-license
|
|
*/
|
|
|
|
namespace App\Http\Requests\Email;
|
|
|
|
use App\Http\Requests\Request;
|
|
use App\Utils\Traits\MakesHash;
|
|
|
|
class SendEmailRequest extends Request
|
|
{
|
|
use MakesHash;
|
|
|
|
/**
|
|
* Determine if the user is authorized to make this request.
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function authorize() : bool
|
|
{
|
|
return $this->checkUserAbleToSend();
|
|
}
|
|
|
|
/**
|
|
* Get the validation rules that apply to the request.
|
|
*
|
|
* @return array
|
|
*/
|
|
public function rules()
|
|
{
|
|
return [
|
|
'template' => 'bail|required',
|
|
'entity' => 'bail|required',
|
|
'entity_id' => 'bail|required',
|
|
];
|
|
}
|
|
|
|
protected function prepareForValidation()
|
|
{
|
|
$input = $this->all();
|
|
|
|
$settings = auth()->user()->company()->settings;
|
|
|
|
if (empty($input['template'])) {
|
|
$input['template'] = '';
|
|
}
|
|
|
|
if (! property_exists($settings, $input['template'])) {
|
|
unset($input['template']);
|
|
}
|
|
|
|
if (array_key_exists('entity_id', $input)) {
|
|
$input['entity_id'] = $this->decodePrimaryKey($input['entity_id']);
|
|
}
|
|
|
|
if (array_key_exists('entity', $input)) {
|
|
$input['entity'] = "App\Models\\".ucfirst($input['entity']);
|
|
}
|
|
|
|
$this->replace($input);
|
|
}
|
|
|
|
public function message()
|
|
{
|
|
return [
|
|
'template' => 'Invalid template.',
|
|
];
|
|
}
|
|
|
|
private function checkUserAbleToSend()
|
|
{
|
|
$input = $this->all();
|
|
|
|
/*Make sure we have all the require ingredients to send a template*/
|
|
if (array_key_exists('entity', $input) && array_key_exists('entity_id', $input) && is_string($input['entity']) && $input['entity_id']) {
|
|
$company = auth()->user()->company();
|
|
|
|
$entity = $input['entity'];
|
|
|
|
/* Harvest the entity*/
|
|
$entity_obj = $entity::whereId($input['entity_id'])->withTrashed()->company()->first();
|
|
|
|
/* Check object, check user and company id is same as users, and check user can edit the object */
|
|
if ($entity_obj && ($company->id == $entity_obj->company_id) && auth()->user()->can('edit', $entity_obj)) {
|
|
return true;
|
|
}
|
|
}
|
|
|
|
return false;
|
|
}
|
|
}
|