Two actions on a function in Laravel, possible? - laravel

Question

I have 2 users roles in my application, admin and former.
The admin can create several formers...
If, I connect me with the ID 1 ? I retrieve the information of the former.
So, my function index() allows to retrieve id of the user
public function index()
{
if($has_role = auth()->user()->hasRole('admin')){
$formers = Former::first()->paginate(5);
return view('admin.formers.index', compact('formers'));
} else{
$formers = Former::where('email', Auth::user()->email)->paginate(5);
return view('admin.formers.index', compact('formers'));
}
}
Well, for the user admin, I would like to create a search bar...
I had created before a function index() and which worked
public function index(Request $req)
{
if ($req->search == "") {
$formers = Former::paginate(5);
return view('admin.formers.index', compact('formers'));
} else {
$validated = $req->validate([
'search' => 'alpha',
]);
$formers = Former::where('nom', 'LIKE', '%' . $validated['search'] . '%')->paginate(5);
$formers->appends($req->only('search'));
return view('admin.formers.index', compact('formers'));
}
}
Now, I would like to adapte my 2 actions in a function, is it possible according you?
Do you think that I can get the user_id and make a search bar in the same function?
Thank you

Answer 1

What I would do is the following:
Add one action which serves both roles with data.
Display the search only to admins, but ignore this fact on the server-side as it doesn't matter from a security perspective whether non-admins can search or not. They are limited to their result anyway.
Basically, this is achievable in the following way:
use Illuminate\Database\Eloquent\Builder;
use Illuminate\Http\Request;
public function index(Request $request)
{
$user = $request->user();
$formers = Former::query()
->when($user->hasRole('admin') !== true, function (Builder $query) use ($user) {
$query->where('email', $user->email);
})
->when($request->has('s'), function (Builder $query) use ($request) {
$query->where('nom', 'like', '%'.$request->input('s').'%');
})
->paginate(5);
return view('admin.formers.index', compact('formers'))
->with('display_search', $user->hasRole('admin'));
}
You can then in your view simply use the $display_search variable to decide whether or not you want to display the search:
#if($display_search)
<form method="post" action="...">
<input type="text" name="s" placeholder="Type to search...">
</form>
#endif

Answer 2

I would create a policy with a search method:
public function search($user)
{
if ($user->isAdmin()) {
return true;
}
}
now you may just edit your blade
#can('search')
<form method="post" action="/search">
<input type="text" name="search" placeholder="Recherche...">
</form>
#endcan
If you want to give search access to other users as well, you only have to modify the policy.