<?php

namespace App\Policies;

use App\Models\PerformanceReview;
use App\Models\User;

class PerformanceReviewPolicy
{
    public function viewAny(User $user): bool
    {
        return $user->hasPermission('performance_view');
    }

    public function view(User $user, PerformanceReview $review): bool
    {
        if ((int) $review->company_id !== (int) $user->company_id) {
            return false;
        }

        if ($user->hasPermission('performance_view')) {
            return true;
        }

        return (int) $review->user_id === (int) $user->id
            || (int) $review->reviewer_id === (int) $user->id;
    }

    public function create(User $user): bool
    {
        return $user->hasPermission('performance_create');
    }

    public function update(User $user, PerformanceReview $review): bool
    {
        if ((int) $review->company_id !== (int) $user->company_id) {
            return false;
        }

        return $user->hasPermission('performance_edit')
            || (int) $review->reviewer_id === (int) $user->id;
    }

    public function delete(User $user, PerformanceReview $review): bool
    {
        return $user->hasPermission('performance_delete')
            && (int) $review->company_id === (int) $user->company_id;
    }
}