Laravel中如何使用Gate和Policy进行权限控制

use Illuminate\Support\Facades\Gate;
<p>Gate::define('publish-post', function ($user) {
return $user->role === 'admin';
});</p><p>Gate::define('edit-post', function ($user, $post) {
return $user->id === $post->user_id;
});

if (Gate::allows('edit-post', $post)) {
    // 允许编辑
}
<p>if (Gate::denies('publish-post')) {
abort(403);
}

$this->authorize('edit-post', $post); // 自动抛出 403 异常

php artisan make:policy PostPolicy --model=Post

use App\Models\Post;
use App\Policies\PostPolicy;
<p>protected $policies = [
Post::class => PostPolicy::class,
];

public function update(User $user, Post $post)
{
    return $user->id === $post->user_id;
}
<p>public function delete(User $user, Post $post)
{
return $user->id === $post->user_id;
}</p><p>public function create(User $user)
{
return $user->role === 'author';
}

// 控制器中
$this->authorize('update', $post);
<p>// 手动检查
Gate::allows('update', $post);

@can('edit-post', $post)
    <a href="/posts/{{ $post->id }}/edit">编辑</a>
@endcan
<p>@cannot('delete', $post)
<span>无删除权限</span>
@endcannot

Route::put('/posts/{post}', function (Post $post) {
    // 更新逻辑
})->middleware('can:update,post');

public function __construct()
{
    $this->middleware('can:update,post')->only('edit', 'update');
}