First announcement of today: a beautiful way to organize your ACL logic in Laravel. Available immediately! http://t.co/kKDOVWiWRO ?
— Laravel (@laravelphp) August 31, 2015
if (Gate::forUser($user)->allows('update-post', $post)) {
//
}
Using User model in request:
if ($request->user()->can('update-post', $post)) {
// ... Update post
}
Blade helpers:
@can('update-post', $post)
Edit Post
@endcan
Form Request classes - in method authorize():
return Gate::allows('update', Post::findOrFail($postId));
Wrapping rules into Policy classes:
Artisan command:
php artisan make:policy PostPolicyPolicy Class function:
class PostPolicy
{
public function update(User $user, Post $post)
{
return $user->id === $post->user_id;
}
}
Personally, it reminds me a little of WordPress users/capabilities functions like current_user_can() and similar ones.
Important note - this new functionality was built not only by Taylor Otwell himself, but also by Adam Wathan - thanks for that, guys!