Video Version of the Lesson
[Only for premium members]
[Only for premium members]
[Only for premium members]
So now that we have the user_id
in our DB table, let's filter by that, so that each user would access only their projects.
Of course, the most typical filter method is to filter with the where()
statement.
app/Http/Controllers/ProjectController.php:
class ProjectController extends Controller{ public function index() { $projects = Project::where('user_id', auth()->id())->get(); return view('projects.index', compact('projects')); } // ...}
If I register with a new user and visit the Projects page, I will not see any projects.
But the problem is I can still enter the Edit page for other projects by guessing the URL of /projects/1/edit
even if different user has created that project.
So, you must add those where()
conditions in...