Kevin Adametz
a3fd361ece
Eigene Compat-Controller (Api/Legacy) fuer die 5 real genutzten
/service-Endpoints (Prod-Log-Beleg): Company-/Kontakt-Create (liefen
410!), PM-Create, Bild-Upload, published-only-GET — verschachtelte
Alt-Params, 201+Location+{}, Alt-Fehlerformat, Hit-Zaehlung,
Legacy-Land-Mapping.
- Anlegen = Einreichen (Alt-Verhalten); Sofort-Publish via neuer
Permission api:immediate-publication (WS-7: connektar zuweisen)
- Admin-Schalter 'KI-Pruefung Legacy-API' (app_settings-Tabelle,
Toggle auf /admin/press-releases): an = review + KI-Routing
- Admin-PM-Liste: KI-Spalte (Ampel-Badge) + manueller Pruef-Button
ohne Routing fuer ungepruefte PMs
- Mails bei API-Einlieferern an Pressekontakt, sonst Firmen-Mail,
Fallback Einlieferer (User-Entscheidung 10.07.)
- Tests: LegacyServiceParityTest (connektar-Flow end-to-end);
Suite 1182 gruen
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
71 lines
2.1 KiB
PHP
71 lines
2.1 KiB
PHP
<?php
|
|
|
|
namespace Database\Seeders;
|
|
|
|
use Illuminate\Database\Seeder;
|
|
use Spatie\Permission\Models\Permission;
|
|
use Spatie\Permission\Models\Role;
|
|
|
|
class RolesAndPermissionsSeeder extends Seeder
|
|
{
|
|
/**
|
|
* Seed the application's database.
|
|
*/
|
|
public function run(): void
|
|
{
|
|
$roles = [
|
|
'admin',
|
|
'editor',
|
|
'customer',
|
|
'api-only',
|
|
];
|
|
|
|
foreach ($roles as $role) {
|
|
Role::firstOrCreate(['name' => $role]);
|
|
}
|
|
|
|
$permissions = [
|
|
'press-releases:read',
|
|
'press-releases:write',
|
|
'press-releases:publish',
|
|
'press-release-images:write',
|
|
'companies:read',
|
|
'newsletter:subscribe',
|
|
'users:manage',
|
|
'roles:manage',
|
|
// Legacy-API-Parität (10.07.2026): Bestandskunden mit dem alten
|
|
// immediatePublication-Recht (connektar) veröffentlichen per
|
|
// /service-POST sofort — sofern der Admin-Schalter „KI-Prüfung
|
|
// Legacy-API" aus ist. Zuweisung je User (WS-7-Checkliste).
|
|
'api:immediate-publication',
|
|
];
|
|
|
|
foreach ($permissions as $permission) {
|
|
Permission::firstOrCreate(['name' => $permission]);
|
|
}
|
|
|
|
Role::findByName('admin')->syncPermissions($permissions);
|
|
Role::findByName('editor')->syncPermissions([
|
|
'press-releases:read',
|
|
'press-releases:write',
|
|
'press-releases:publish',
|
|
'press-release-images:write',
|
|
'companies:read',
|
|
'newsletter:subscribe',
|
|
]);
|
|
Role::findByName('customer')->syncPermissions([
|
|
'press-releases:read',
|
|
'press-releases:write',
|
|
'press-release-images:write',
|
|
'companies:read',
|
|
'newsletter:subscribe',
|
|
]);
|
|
Role::findByName('api-only')->syncPermissions([
|
|
'press-releases:read',
|
|
'press-releases:write',
|
|
'press-release-images:write',
|
|
'companies:read',
|
|
'newsletter:subscribe',
|
|
]);
|
|
}
|
|
}
|