framework/src/Api
Toby Zerner f0df751465 Overhaul permissions
Get rid of Permissible - too complex and inefficient. Replace with:
- a “Locked” trait which works similarly but only evaluates logic on
hydrated models.
- a “VisibleScope” trait which also works similarly but only scopes
queries

This is all we need, Permissible is overkill. There is only one
instance where we have to duplicate some logic
(Discussion::scopeVisiblePosts and Post::allow(‘view’, …)) but it’s
barely anything.

Haven’t decoupled for now, we can definitely look at doing that later.

Permissions table seeder slightly updated.

Also did a bit of a query audit, there’s still a lot to be done but
it’s much better than it was. Some relatively low-hanging fruit
detailed in EloquentPostRepository.
2015-06-16 17:33:56 +09:30
..
Actions Overhaul permissions 2015-06-16 17:33:56 +09:30
Events Add WillRespond event 2015-06-16 17:22:15 +09:30
Middleware Making a note that we should not use Actor as a singleton 2015-05-02 08:57:14 +09:30
Serializers Overhaul permissions 2015-06-16 17:33:56 +09:30
ApiServiceProvider.php Update API action architecture 2015-05-02 08:56:43 +09:30
ExceptionHandler.php Move some API error handling code around. It still sucks though 2015-05-07 16:08:20 +09:30
JsonApiRequest.php Update API action architecture 2015-05-02 08:56:43 +09:30
JsonApiResponse.php Update API action architecture 2015-05-02 08:56:43 +09:30
Request.php Add pagination links to JSON-API index actions 2015-05-07 08:22:15 +09:30
routes.php Very rough implementation of forgot password 2015-05-26 11:14:06 +09:30