phpvms/app/Http/Controllers/Api/FlightController.php

<?php

namespace App\Http\Controllers\Api;

use Auth;
use Illuminate\Http\Request;
use Prettus\Repository\Criteria\RequestCriteria;
use Prettus\Repository\Exceptions\RepositoryException;

use App\Services\UserService;
use App\Repositories\FlightRepository;
use App\Http\Resources\Flight as FlightResource;

/**
 * Class FlightController
 * @package App\Http\Controllers\Api
 */
class FlightController extends RestController
{
    protected $flightRepo, $userSvc;

    public function __construct(
        FlightRepository $flightRepo,
        UserService $userSvc
    ) {
        $this->flightRepo = $flightRepo;
        $this->userSvc = $userSvc;
    }

    /**
     * Filter out subfleets to only include aircraft that a user has access to
     * @param $user
     * @param $flight
     * @return mixed
     */
    public function filterSubfleets($user, $flight)
    {
        if(setting('pireps.restrict_aircraft_to_rank', false) === false) {
            return $flight;
        }

        $allowed_subfleets = $this->userSvc->getAllowableSubfleets($user)->pluck('id');
        $flight->subfleets = $flight->subfleets->filter(
            function($subfleet, $item) use ($allowed_subfleets) {
                if ($allowed_subfleets->contains($subfleet->id)) {
                    return true;
                }
            });

        return $flight;
    }

    /**
     * Return all the flights, paginated
     */
    public function index(Request $request)
    {
        $flights = $this->flightRepo
                        ->orderBy('flight_number', 'asc')
                        ->paginate(50);

        $user = Auth::user();
        foreach($flights as $flight) {
            $this->filterSubfleets($user, $flight);
        }

        return FlightResource::collection($flights);
    }

    /**
     * @param $id
     * @return FlightResource
     */
    public function get($id)
    {
        $flight = $this->flightRepo->find($id);
        $this->filterSubfleets(Auth::user(), $flight);

        FlightResource::withoutWrapping();
        return new FlightResource($flight);
    }

    /**
     * @param Request $request
     * @return mixed
     */
    public function search(Request $request)
    {
        try {
            $this->flightRepo->searchCriteria($request);
            $this->flightRepo->pushCriteria(new RequestCriteria($request));
            $flights = $this->flightRepo->paginate();
        } catch (RepositoryException $e) {
            return response($e, 503);
        }

        $user = Auth::user();
        foreach ($flights as $flight) {
            $this->filterSubfleets($user, $flight);
        }

        return FlightResource::collection($flights);
    }
}