<?php

namespace App\Http\Middleware;

use App\Utilities\BusinessOperationPermissions;
use Closure;
use Illuminate\Http\Request;

class EnsureBusinessOperationAccess
{
    public function handle(
        Request $request,
        Closure $next,
        string $section,
        string $page,
        string $operation,
    ): mixed {
        abort_unless(
            BusinessOperationPermissions::can($section, $page, $operation, $request->user()),
            403,
            '当前账号没有该操作权限。',
        );

        return $next($request);
    }
}