api/app/Policies/GamePolicy.php

@@ -12,18 +12,31 @@ class GamePolicy
      */
     public function viewAny(User $user): bool
     {
-        if ($user->type === 'A' || $user->blocked === 1 ) {
-            return true;
+        if ($user->blocked === 1) {
+            return false;
         }
-
-        return false;
+        return true;
     }
 
-    /**
+    /**2
      * Determine whether the user can view the model.
      */
     public function view(User $user, Game $game): bool
     {
+        if ($user->type === "A") {
+            return true;
+        }
+        if ($user->blocked === 1) {
+            return false;
+        }
+
+        if (
+            $game->player1_user_id === $user->id ||
+            $game->player2_user_id === $user->id
+        ) {
+            return true;
+        }
+
         return false;
     }
 
@@ -32,7 +45,7 @@ class GamePolicy
      */
     public function create(User $user): bool
     {
-        if ($user->type === 'A' || $user->blocked === 1) {
+        if ($user->type === "A" || $user->blocked === 1) {
             return false;
         }
 
@@ -41,11 +54,14 @@ class GamePolicy
 
     public function join(User $user, Game $game): bool
     {
-        if ($user->type === 'A' || $user->blocked === 1) {
+        if ($user->type === "A" || $user->blocked === 1) {
             return false;
         }
 
-        if ($game->status !== 'waiting' || $game->player1_user_id === $user->id) {
+        if (
+            $game->status !== "waiting" ||
+            $game->player1_user_id === $user->id
+        ) {
             return false;
         }
 
@@ -54,12 +70,12 @@ class GamePolicy
 
     public function resign(User $user, Game $game): bool
     {
-        if ($user->type === 'A' || $user->blocked === 1) {
+        if ($user->type === "A" || $user->blocked === 1) {
             return false;
         }
 
         if (
-            $game->status !== 'ongoing' ||
+            $game->status !== "ongoing" ||
             ($game->player1_user_id !== $user->id &&
                 $game->player2_user_id !== $user->id)
         ) {
@@ -74,9 +90,19 @@ class GamePolicy
      */
     public function update(User $user, Game $game): bool
     {
-        if ($user->type === 'A' || $user->blocked === 1) {
+        if ($user->type === "A" || $user->blocked === 1) {
             return false;
         }
+
+        if (
+            $game->status !== "ongoing" ||
+            ($game->player1_user_id !== $user->id &&
+                $game->player2_user_id !== $user->id)
+        ) {
+            return false;
+        }
+
+        return true;
     }
 
     /**

api/app/Policies/UserPolicy.php

@@ -0,0 +1,65 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\User;
+use Illuminate\Auth\Access\Response;
+
+class UserPolicy
+{
+    /**
+     * Determine whether the user can view any models.
+     */
+    public function viewAny(User $user): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     */
+    public function view(User $user, User $model): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     */
+    public function create(User $user): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     */
+    public function update(User $user, User $model): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     */
+    public function delete(User $user, User $model): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     */
+    public function restore(User $user, User $model): bool
+    {
+        return false;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     */
+    public function forceDelete(User $user, User $model): bool
+    {
+        return false;
+    }
+}

api/bootstrap/cache/services.php

@@ -102,12 +102,15 @@
     'Illuminate\\Queue\\Console\\ForgetFailedCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\ListenCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\MonitorCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
+    'Illuminate\\Queue\\Console\\PauseCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\PruneBatchesCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\PruneFailedJobsCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\RestartCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
+    'Illuminate\\Queue\\Console\\ResumeCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\RetryCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\RetryBatchCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Queue\\Console\\WorkCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
+    'Illuminate\\Foundation\\Console\\ReloadCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Foundation\\Console\\RouteCacheCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Foundation\\Console\\RouteClearCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',
     'Illuminate\\Foundation\\Console\\RouteListCommand' => 'Illuminate\\Foundation\\Providers\\ConsoleSupportServiceProvider',

frontend/.env.example

@@ -1,2 +1,2 @@
 VITE_API_DOMAIN=localhost:8000
-VITE_WS_CONNECTION=ws://localhost:3000
+VITE_WS_CONNECTION=ws://localhost:3001