From 96de1c2fbee619e1f60f661ff8da8458377a990a Mon Sep 17 00:00:00 2001
From: Moradi <ehsan.meshkee.co@gmail.com>
Date: Thu, 27 Feb 2025 17:57:46 +0330
Subject: [PATCH] add new rules for store and update package

---
 app/Http/Requests/StorePackageRequest.php |  7 +++++--
 app/Rules/ValidateItemOwnership.php       | 23 +++++++++++++++++++++++
 2 files changed, 28 insertions(+), 2 deletions(-)
 create mode 100644 app/Rules/ValidateItemOwnership.php

diff --git a/app/Http/Requests/StorePackageRequest.php b/app/Http/Requests/StorePackageRequest.php
index 678b2ae9..156dc60b 100644
--- a/app/Http/Requests/StorePackageRequest.php
+++ b/app/Http/Requests/StorePackageRequest.php
@@ -2,6 +2,7 @@
 
 namespace App\Http\Requests;
 
+use App\Rules\ValidateItemOwnership;
 use Illuminate\Foundation\Http\FormRequest;
 
 class StorePackageRequest extends FormRequest
@@ -23,7 +24,8 @@ class StorePackageRequest extends FormRequest
                 return [
                     'name' => 'required|max:250',
                     'note' => 'nullable',
-                    'items' => 'required',
+                    'items' => 'required|array|min:1',
+                    'items.*' => ['exists:items,id','integer',new ValidateItemOwnership()],
                 ];
                 break;
             }
@@ -33,7 +35,8 @@ class StorePackageRequest extends FormRequest
                 return [
                     'name' => 'required|max:250',
                     'note' => 'nullable',
-                    'items' => 'required',
+                    'items' => 'required|array|min:1',
+                    'items.*' => ['exists:items,id','integer',new ValidateItemOwnership()],
                 ];
                 break;
 
diff --git a/app/Rules/ValidateItemOwnership.php b/app/Rules/ValidateItemOwnership.php
new file mode 100644
index 00000000..0ef0c5f0
--- /dev/null
+++ b/app/Rules/ValidateItemOwnership.php
@@ -0,0 +1,23 @@
+<?php
+
+namespace App\Rules;
+
+use App\Models\Item;
+use Closure;
+use Illuminate\Contracts\Validation\ValidationRule;
+
+class ValidateItemOwnership implements ValidationRule
+{
+    /**
+     * Run the validation rule.
+     *
+     * @param  \Closure(string, ?string=): \Illuminate\Translation\PotentiallyTranslatedString  $fail
+     */
+    public function validate(string $attribute, mixed $value, Closure $fail): void
+    {
+        $item = Item::find($value);
+        if(!($item && $item->user_id === auth()->id())){
+            $fail(":attribute have invalid ownership");
+        }
+    }
+}