# fluent-support/2.4.5/app/Http/Policies/AgentPolicy.php

Fluent Support – Helpdesk & Customer Support Ticket System, version 2.4.5. 63 lines.

- Page: https://pluginprobe.com/plugins/fluent-support/2.4.5/code/app/Http/Policies/AgentPolicy.php
- Raw: https://pluginprobe.com/plugins/fluent-support/2.4.5/raw/app/Http/Policies/AgentPolicy.php
- Modified: 2026-10-09T15:31:16+00:00

Line numbers below start at 1. Link to a line or a range by appending a fragment to the
page URL, for example `https://pluginprobe.com/plugins/fluent-support/2.4.5/code/app/Http/Policies/AgentPolicy.php#L10-L20`.

```php
<?php

namespace FluentSupport\App\Http\Policies;

use FluentSupport\App\Modules\PermissionManager;
use FluentSupport\Framework\Http\Request\Request;
use FluentSupport\Framework\Foundation\Policy;

class AgentPolicy extends Policy
{
    /**
     * @param  \FluentSupport\Framework\Http\Request\Request $request
     * @return Boolean
     */
    public function verifyRequest(Request $request)
    {
        // Only reached by routes without their own method here (index, avatar).
        return PermissionManager::currentUserCan('fst_sensitive_data');
    }

    public function addAgent(Request $request)
    {
        return $this->guardManageOptions();
    }

    public function updateAgent(Request $request)
    {
        return $this->guardManageOptions();
    }

    public function deleteAgent(Request $request)
    {
        return $this->guardManageOptions();
    }

    /**
     * Agent records carry plugin permissions, so editing them grants privileges.
     * Gate on manage_options, which the plugin's own permission system can't grant.
     * Throwing gives a specific message, and the code becomes the HTTP status.
     *
     * @return Boolean
     * @throws \Exception
     */
    protected function guardManageOptions()
    {
        if (current_user_can('manage_options')) {
            return true;
        }

        if (!is_user_logged_in()) {
            throw new \Exception(
                esc_html__('You must be logged in to perform this action.', 'fluent-support'),
                401
            );
        }

        throw new \Exception(
            esc_html__('Only administrators can add, edit, or delete support staff.', 'fluent-support'),
            403
        );
    }
}

```