Implement individual table permissions

krait/routes/tables.php

@@ -3,6 +3,9 @@
 use Illuminate\Support\Facades\Route;
 
 foreach (app('tables') as $name => $table) {
-    $tableName = app($table['table'])->name();
-    Route::get($tableName, $table['controller'])->name($tableName);
+    $tableObject = app($table['table']);
+    $tableName = $tableObject->name();
+    Route::middleware($tableObject->middlewares())
+        ->get($tableName, $table['controller'])
+        ->name($tableName);
 }

krait/src/Http/Resources/TableCollection.php

@@ -39,6 +39,10 @@ public function __construct(
 
     public function toArray(Request $request)
     {
+        if (! $this->table->authorize($request)) {
+            abort(403);
+        }
+
         return $this->collection->map(function ($record) {
             return array_merge(
                 [

krait/src/KraitServiceProvider.php

@@ -2,14 +2,16 @@
 
 namespace MtrDesign\Krait;
 
-use DirectoryIterator;
+use FilesystemIterator;
 use Illuminate\Contracts\Foundation\CachesRoutes;
 use Illuminate\Support\Facades\Blade;
 use Illuminate\Support\Facades\Route;
 use Illuminate\Support\ServiceProvider;
 use Illuminate\Support\Str;
 use MtrDesign\Krait\Services\PreviewConfigService;
 use MtrDesign\Krait\Tables\BaseTable;
+use RecursiveDirectoryIterator;
+use RecursiveIteratorIterator;
 use RuntimeException;
 
 /**
@@ -90,15 +92,15 @@ protected function configRoutes(): void
             'prefix' => config('krait.path', 'krait'),
             'as' => 'krait.',
             'namespace' => 'MtrDesign\Krait\Http\Controllers',
-            'middleware' => config('krait.middleware', ['web', 'auth']),
+            'middleware' => config('krait.global_middlewares', ['web', 'auth']),
         ], function () {
             $this->loadRoutesFrom(__DIR__.'/../routes/web.php');
         });
 
         Route::group([
             'prefix' => config('krait.tables_path', 'tables'),
             'namespace' => 'App\Http\Controllers',
-            'middleware' => config('krait.middleware', ['web', 'auth']),
+            'middleware' => config('krait.global_middlewares', ['web', 'auth']),
         ], function () {
             $this->loadRoutesFrom(__DIR__.'/../routes/tables.php');
         });
@@ -125,31 +127,47 @@ protected function configBladeMacros(): void
      */
     protected function registerTables(): void
     {
+        $tablesDirectory = config('krait.tables_directory');
+        Krait::sanityPath($tablesDirectory);
+
         $tables = [];
         if (file_exists(config('krait.tables_directory'))) {
-            $directory = new DirectoryIterator(config('krait.tables_directory'));
+            $tablesDirectory = config('krait.tables_directory');
+            Krait::sanityPath($tablesDirectory);
+
+            foreach (new RecursiveIteratorIterator(
+                new RecursiveDirectoryIterator($tablesDirectory,
+                    FilesystemIterator::SKIP_DOTS),
+                RecursiveIteratorIterator::SELF_FIRST) as $file) {
 
-            foreach ($directory as $file) {
                 if (! $file->isFile()) {
                     continue;
                 }
 
-                $tableClassName = substr($file, 0, -4);
-                $tableClass = config('krait.tables_namespace').$tableClassName;
-                if (! is_subclass_of($tableClass, BaseTable::class)) {
+                $namespace = Str::replace(app_path().'/', 'App/', $tablesDirectory);
+                $namespace = Str::replace('/', '\\', $namespace);
+
+                $className = explode($tablesDirectory.'/', $file->getPathname())[1];
+                $className = Str::replace('/', '\\', $className);
+                $className = substr($className, 0, -4);
+
+                $fullClass = sprintf('%s\%s', $namespace, $className);
+
+                if (! is_subclass_of($fullClass, BaseTable::class)) {
                     continue;
                 }
 
-                $this->app->singleton($tableClass, function ($app) use ($tableClass) {
+                $this->app->singleton($fullClass, function ($app) use ($fullClass) {
                     $previewConfigService = $app->make(PreviewConfigService::class);
-                    $table = new $tableClass($previewConfigService);
+                    $table = new $fullClass($previewConfigService);
                     $table->initColumns();
 
                     return $table;
                 });
-                $tables[$tableClassName] = [
-                    'table' => $tableClass,
-                    'controller' => 'App\\Http\\Controllers\\Tables\\'.$tableClassName.'Controller',
+
+                $tables[$className] = [
+                    'table' => $fullClass,
+                    'controller' => 'App\\Http\\Controllers\\Tables\\'.$className.'Controller',
                 ];
             }
         }

krait/src/Tables/BaseTable.php

@@ -4,6 +4,7 @@
 
 use Exception;
 use Illuminate\Database\Eloquent\Model;
+use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Cache;
 use Illuminate\Support\Str;
 use Laravel\Prompts\Table;
@@ -45,6 +46,23 @@ abstract public function name(): string;
      */
     abstract public function initColumns(): void;
 
+    /**
+     * Flags if the request is authorized to see the table's data.
+     */
+    public function authorize(Request $request): bool
+    {
+        return true;
+    }
+
+    /**
+     * Returns the specific table middlewares that should be
+     * applied to the request.
+     */
+    public function middlewares(): array
+    {
+        return [];
+    }
+
     /**
      * Flags if the columns should be cached.
      * Usable for dynamic columns serving (from a third-party services).

krait/stubs/krait.php

@@ -44,7 +44,7 @@
     |
     */
 
-    'middleware' => ['web', 'auth'],
+    'global_middlewares' => ['web', 'auth'],
 
     /*
     |--------------------------------------------------------------------------