From d98b7ab7e058616cd1d6691befb82f0e8beacf30 Mon Sep 17 00:00:00 2001
From: Andras Bacsai <5845193+andrasbacsai@users.noreply.github.com>
Date: Tue, 26 Aug 2025 21:44:36 +0200
Subject: [PATCH] feat(policies): add EnvironmentVariablePolicy for managing
 environment variables ( it was missing )

---
 app/Policies/EnvironmentVariablePolicy.php    | 73 +++++++++++++++++++
 app/Providers/AuthServiceProvider.php         |  1 +
 .../environment-variable/show.blade.php       |  2 +-
 3 files changed, 75 insertions(+), 1 deletion(-)
 create mode 100644 app/Policies/EnvironmentVariablePolicy.php

diff --git a/app/Policies/EnvironmentVariablePolicy.php b/app/Policies/EnvironmentVariablePolicy.php
new file mode 100644
index 000000000..21e2ea443
--- /dev/null
+++ b/app/Policies/EnvironmentVariablePolicy.php
@@ -0,0 +1,73 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\EnvironmentVariable;
+use App\Models\User;
+
+class EnvironmentVariablePolicy
+{
+    /**
+     * Determine whether the user can view any models.
+     */
+    public function viewAny(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can view the model.
+     */
+    public function view(User $user, EnvironmentVariable $environmentVariable): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can create models.
+     */
+    public function create(User $user): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can update the model.
+     */
+    public function update(User $user, EnvironmentVariable $environmentVariable): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can delete the model.
+     */
+    public function delete(User $user, EnvironmentVariable $environmentVariable): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can restore the model.
+     */
+    public function restore(User $user, EnvironmentVariable $environmentVariable): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can permanently delete the model.
+     */
+    public function forceDelete(User $user, EnvironmentVariable $environmentVariable): bool
+    {
+        return true;
+    }
+
+    /**
+     * Determine whether the user can manage environment variables.
+     */
+    public function manageEnvironment(User $user, EnvironmentVariable $environmentVariable): bool
+    {
+        return true;
+    }
+}
diff --git a/app/Providers/AuthServiceProvider.php b/app/Providers/AuthServiceProvider.php
index a17d9ec5e..3e76e6976 100644
--- a/app/Providers/AuthServiceProvider.php
+++ b/app/Providers/AuthServiceProvider.php
@@ -27,6 +27,7 @@ class AuthServiceProvider extends ServiceProvider
         \App\Models\ServiceDatabase::class => \App\Policies\ServiceDatabasePolicy::class,
         \App\Models\Project::class => \App\Policies\ProjectPolicy::class,
         \App\Models\Environment::class => \App\Policies\EnvironmentPolicy::class,
+        \App\Models\EnvironmentVariable::class => \App\Policies\EnvironmentVariablePolicy::class,
         \App\Models\SharedEnvironmentVariable::class => \App\Policies\SharedEnvironmentVariablePolicy::class,
         // Database policies - all use the shared DatabasePolicy
         \App\Models\StandalonePostgresql::class => \App\Policies\DatabasePolicy::class,
diff --git a/resources/views/livewire/project/shared/environment-variable/show.blade.php b/resources/views/livewire/project/shared/environment-variable/show.blade.php
index 63148b74c..258c65219 100644
--- a/resources/views/livewire/project/shared/environment-variable/show.blade.php
+++ b/resources/views/livewire/project/shared/environment-variable/show.blade.php
@@ -54,7 +54,7 @@
                     @endif
                 </div>
             @endcan
-            @can('manageEnvironment', $this->resource)
+            @can('update', $this->env)
                 <div class="flex flex-col w-full gap-2 lg:flex-row">
                     @if (!$is_redis_credential)
                         @if ($type === 'service')