policies updated

app/Policies/EventPolicy.php

@@ -30,7 +30,7 @@ class EventPolicy
      */
     public function view(User $user, Event $event)
     {
-        //
+        return $user->is_lecturer;
     }
 
     /**
@@ -41,7 +41,7 @@ class EventPolicy
      */
     public function create(User $user)
     {
-        //
+        return $user->is_lecturer;
     }
 
     /**
@@ -53,7 +53,7 @@ class EventPolicy
      */
     public function update(User $user, Event $event)
     {
-        //
+        return $user->belongsToTeam($event->course->lecturer->team);
     }
 
     /**

app/Policies/ParticipantPolicy.php

@@ -14,6 +14,7 @@ class ParticipantPolicy
      * Determine whether the user can view any models.
      *
      * @param  \App\Models\User  $user
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function viewAny(User $user)
@@ -26,17 +27,24 @@ class ParticipantPolicy
      *
      * @param  \App\Models\User  $user
      * @param  \App\Models\Participant  $participant
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function view(User $user, Participant $participant)
     {
-        //
+        if ($participant->registrations) {
+            return $participant->whereHas('registrations.event.course.lecturer',
+                fn($q) => $q->where('team_id', $user->current_team_id))
+                               ->exists();
+        }
+        return false;
     }
 
     /**
      * Determine whether the user can create models.
      *
      * @param  \App\Models\User  $user
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function create(User $user)
@@ -49,6 +57,7 @@ class ParticipantPolicy
      *
      * @param  \App\Models\User  $user
      * @param  \App\Models\Participant  $participant
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function update(User $user, Participant $participant)
@@ -61,6 +70,7 @@ class ParticipantPolicy
      *
      * @param  \App\Models\User  $user
      * @param  \App\Models\Participant  $participant
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function delete(User $user, Participant $participant)
@@ -73,6 +83,7 @@ class ParticipantPolicy
      *
      * @param  \App\Models\User  $user
      * @param  \App\Models\Participant  $participant
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function restore(User $user, Participant $participant)
@@ -85,6 +96,7 @@ class ParticipantPolicy
      *
      * @param  \App\Models\User  $user
      * @param  \App\Models\Participant  $participant
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function forceDelete(User $user, Participant $participant)

app/Policies/RegistrationPolicy.php

@@ -14,6 +14,7 @@ class RegistrationPolicy
      * Determine whether the user can view any models.
      *
      * @param  \App\Models\User  $user
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function viewAny(User $user)
@@ -26,17 +27,21 @@ class RegistrationPolicy
      *
      * @param  \App\Models\User  $user
      * @param  \App\Models\Registration  $registration
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function view(User $user, Registration $registration)
     {
-        //
+        return $registration->whereHas('event.course.lecturer',
+            fn($q) => $q->where('team_id', $user->current_team_id))
+                            ->exists();
     }
 
     /**
      * Determine whether the user can create models.
      *
      * @param  \App\Models\User  $user
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function create(User $user)
@@ -49,6 +54,7 @@ class RegistrationPolicy
      *
      * @param  \App\Models\User  $user
      * @param  \App\Models\Registration  $registration
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function update(User $user, Registration $registration)
@@ -61,6 +67,7 @@ class RegistrationPolicy
      *
      * @param  \App\Models\User  $user
      * @param  \App\Models\Registration  $registration
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function delete(User $user, Registration $registration)
@@ -73,6 +80,7 @@ class RegistrationPolicy
      *
      * @param  \App\Models\User  $user
      * @param  \App\Models\Registration  $registration
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function restore(User $user, Registration $registration)
@@ -85,6 +93,7 @@ class RegistrationPolicy
      *
      * @param  \App\Models\User  $user
      * @param  \App\Models\Registration  $registration
+     *
      * @return \Illuminate\Auth\Access\Response|bool
      */
     public function forceDelete(User $user, Registration $registration)