feat(admin): Benutzerverwaltung mit CRUD und Rollenzuweisung

- Admin-Modul unter /admin/users (nur role:admin) - Benutzer anlegen, bearbeiten, löschen - Rollenzuweisung im Formular - Navigationslink für Admins - CHANGELOG v0.3.0 Version: 0.3.0
2026-06-27 17:24:49 +02:00
parent a9f86b2551
commit 69ce876138
7 changed files with 397 additions and 5 deletions
@@ -0,0 +1,100 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Hash;
+use Illuminate\Validation\Rule;
+use Illuminate\Validation\Rules\Password;
+use Illuminate\View\View;
+use Spatie\Permission\Models\Role;
+
+class UserController extends Controller
+{
+    public function index(): View
+    {
+        $users = User::with('roles')->orderBy('name')->paginate(20);
+
+        return view('admin.users.index', compact('users'));
+    }
+
+    public function create(): View
+    {
+        $roles = Role::orderBy('name')->get();
+
+        return view('admin.users.create', compact('roles'));
+    }
+
+    public function store(Request $request): RedirectResponse
+    {
+        $validated = $request->validate([
+            'name'     => ['required', 'string', 'max:255'],
+            'email'    => ['required', 'string', 'email', 'max:255', 'unique:users'],
+            'password' => ['required', Password::min(8)->mixedCase()->numbers()],
+            'role'     => ['required', 'string', Rule::exists('roles', 'name')],
+        ]);
+
+        $user = User::create([
+            'name'     => $validated['name'],
+            'email'    => $validated['email'],
+            'password' => Hash::make($validated['password']),
+        ]);
+
+        $user->assignRole($validated['role']);
+
+        return redirect()
+            ->route('admin.users.index')
+            ->with('success', "Benutzer „{$user->name}" wurde angelegt.");
+    }
+
+    public function edit(User $user): View
+    {
+        $roles = Role::orderBy('name')->get();
+
+        return view('admin.users.edit', compact('user', 'roles'));
+    }
+
+    public function update(Request $request, User $user): RedirectResponse
+    {
+        $validated = $request->validate([
+            'name'     => ['required', 'string', 'max:255'],
+            'email'    => ['required', 'string', 'email', 'max:255', Rule::unique('users')->ignore($user->id)],
+            'password' => ['nullable', Password::min(8)->mixedCase()->numbers()],
+            'role'     => ['required', 'string', Rule::exists('roles', 'name')],
+        ]);
+
+        $user->update([
+            'name'  => $validated['name'],
+            'email' => $validated['email'],
+        ]);
+
+        if (!empty($validated['password'])) {
+            $user->update(['password' => Hash::make($validated['password'])]);
+        }
+
+        $user->syncRoles([$validated['role']]);
+
+        return redirect()
+            ->route('admin.users.index')
+            ->with('success', "Benutzer „{$user->name}" wurde aktualisiert.");
+    }
+
+    public function destroy(User $user): RedirectResponse
+    {
+        if ($user->id === auth()->id()) {
+            return redirect()
+                ->route('admin.users.index')
+                ->with('error', 'Du kannst deinen eigenen Account nicht löschen.');
+        }
+
+        $name = $user->name;
+        $user->delete();
+
+        return redirect()
+            ->route('admin.users.index')
+            ->with('success', "Benutzer „{$name}" wurde gelöscht.");
+    }
+}