<?php

namespace App\Policies;

use App\Models\User;
use App\Models\Zone;

/**
 * Household-wide RBAC, not per-user tenant isolation: every authenticated
 * user (owner or viewer) sees the same zones, only `owner` can write.
 * `zones.user_id` records who registered the zone, it isn't a visibility
 * boundary.
 */
class ZonePolicy
{
    public function viewAny(User $user): bool
    {
        return true;
    }

    public function view(User $user, Zone $zone): bool
    {
        return true;
    }

    public function create(User $user): bool
    {
        return $user->isOwner();
    }

    public function update(User $user, Zone $zone): bool
    {
        return $user->isOwner();
    }

    public function delete(User $user, Zone $zone): bool
    {
        return $user->isOwner();
    }
}