Mahmoud Al-HabashOpen to new projects
  • WorkWork
  • ServicesServices
  • LabLab
  • WritingWriting
  • ContactContact
Amman--:--عربي
Writing/Laravel

Laravel Authorization Policies

Implement fine-grained authorization with Laravel policies.

16 January 20261 min readLaravelاقرأ بالعربية

On this page

  1. Create Policy
  2. Policy Methods
  3. Use in Controller
  4. Use in Blade

Authorization with policies:

Create Policy

php artisan make:policy PostPolicy --model=Post

Policy Methods

php
class PostPolicy
{
    public function update(User $user, Post $post): bool
    {
        return $user->id === $post->user_id;
    }

    public function delete(User $user, Post $post): bool
    {
        return $user->id === $post->user_id || $user->isAdmin();
    }
}

Use in Controller

php
$this->authorize('update', $post);

Use in Blade

blade
@can('update', $post)
    <button>Edit</button>
@endcan
All articles

Keep reading

  • Laravel Action Classes Pattern16 January 20261 min read
  • Laravel Action Classes: Single Responsibility16 January 20261 min read
  • Laravel API Rate Limiting16 January 20261 min read