<?php

namespace App\Policies;

use App\Models\Submission;
use App\Models\Account;
use Illuminate\Auth\Access\Response;

class SubmissionPolicy
{
    public function viewAny($user)
    {
        // pasien & dokter boleh lihat submission…
        return in_array($user->role, ['patient','doctor', 'admin']);
    }
    public function view($user, Submission $s)
    {
        if($user->role==='patient'){
            return $s->patient_id === $user->id;
        }
        if($user->role==='doctor' || $user->role==='admin'){
            // dokter lihat semua (atau tambahkan filter assigned/idempot)
            return true;
        }
        return false;
    }
    public function create($user)
    {
        return $user->role==='patient' || $user->role==='admin';
    }
    public function update($user, Submission $s)
    {
        if ($user->role === 'admin') {
            return true;
        }

        if ($user->role === 'doctor') {
            return true;
        }

        if ($user->role === 'patient') {
            return $s->patient_id === $user->id
                && $s->status === 'pending';
        }

        return false;
    }
    public function delete($user, Submission $submission)
    {
        if ($user->role === 'admin') {
            return true;
        }
        if ($user->role === 'doctor') {
            return true;
        }
        if ($user->role === 'patient') {
            return $submission->patient_id === $user->id;
        }
        return false;
    }


    /**
     * Determine whether the user can restore the model.
     */
    public function restore(Account $user, Submission $submission): bool
    {
        return false;
    }

    /**
     * Determine whether the user can permanently delete the model.
     */
    public function forceDelete(Account $user, Submission $submission): bool
    {
        return false;
    }
}