<?php

namespace App\Policies;

use Illuminate\Auth\Access\HandlesAuthorization;
use App\Model\User;
use App\Model\CustomerEmailTemplate;

class CustomerEmailTemplatePolicy
{
    use HandlesAuthorization;

    public function list(User $user)
    {
        // RBAC check
        if (!$user->hasPermission('template.full_access') && !$user->hasPermission('template.read_only')) {
            return false;
        }

        return true;
    }


    public function read(User $user, CustomerEmailTemplate $customerEmailTemplate)
    {
        // RBAC check
        if (!$user->hasPermission('template.full_access') && !$user->hasPermission('template.read_only')) {
            return false;
        }

        $can = $user->customer->id == $customerEmailTemplate->customer_id;

        return $can;
    }

    public function create(User $user)
    {
        // RBAC check
        if (!$user->hasPermission('template.full_access')) {
            return false;
        }

        $can = true;

        return $can;
    }

    public function view(User $user, CustomerEmailTemplate $customerEmailTemplate)
    {
        // RBAC check
        if (!$user->hasPermission('template.full_access') && !$user->hasPermission('template.read_only')) {
            return false;
        }

        $can = $user->customer->id == $customerEmailTemplate->customer_id;

        return $can;
    }

    public function update(User $user, CustomerEmailTemplate  $customerEmailTemplate)
    {
        // RBAC check
        if (!$user->hasPermission('template.full_access')) {
            return false;
        }

        $can = $user->customer->id == $customerEmailTemplate->customer_id;

        return $can;
    }

    public function image(User $user, CustomerEmailTemplate $customerEmailTemplate)
    {
        // RBAC check
        if (!$user->hasPermission('template.full_access') && !$user->hasPermission('template.read_only')) {
            return false;
        }

        $can = $user->customer->id == $customerEmailTemplate->customer_id;

        return $can;
    }

    public function delete(User $user, CustomerEmailTemplate $customerEmailTemplate)
    {
        // RBAC check
        if (!$user->hasPermission('template.full_access')) {
            return false;
        }

        $can = $user->customer->id == $customerEmailTemplate->customer_id;

        return $can;
    }

    public function preview(User $user, CustomerEmailTemplate $customerEmailTemplate)
    {
        // RBAC check
        if (!$user->hasPermission('template.full_access') && !$user->hasPermission('template.read_only')) {
            return false;
        }

        $can = $user->customer->id == $customerEmailTemplate->customer_id;

        return $can;
    }

    public function copy(User $user, CustomerEmailTemplate $customerEmailTemplate)
    {
        // RBAC check
        if (!$user->hasPermission('template.full_access')) {
            return false;
        }

        $can = $user->customer->id == $customerEmailTemplate->customer_id;
        return $can;
    }
}