Authorization with policies:
Create Policy
php artisan make:policy PostPolicy --model=PostPolicy Methods
class PostPolicy
{
public function update(User $user, Post $post): bool
{
return $user->id === $post->user_id;
}
public function delete(User $user, Post $post): bool
{
return $user->id === $post->user_id || $user->isAdmin();
}
}Use in Controller
$this->authorize('update', $post);Use in Blade
@can('update', $post)
<button>Edit</button>
@endcan