How to make policy in laravel?

Hi guys,

In this article, We are studying Policy in laravel. The policy helps developers streamline authorization logic and keep their code clean and maintainable. Laravel Policies provide a way to authorize user actions on resources. Policies help centralize authorization logic and make it easy to manage access rules.

How to make policy in laravel?

Create a Policy:

Run the below command, to create a policy class in laravel. It will create an ArticlePolicy class in the app\Policies directory.

php artisan make:policy ArticlePolicy

Define Policy Methods:

You can define different methods that perform on posts. You might create methods like view, create, update, and delete. These methods should return a boolean value.

public function view(User $user, Article $article)
{
	return $user->id == $post->user_id;
}

The above method checks articles created by and access users is the same.

Register Policies:

You should register your policies in the AuthServiceProvider provider. You can add policies to their respective policies.

protected $policies = [
	Article::class = ArticlePolicy::class,
];

Use Policies in Controllers

After registering the policy, you can authorize actions on the controller.

public function show(Post $post)
{
	$this->authorize('view', $post);
}

The authorize method checks if the current user is authorized to view the article using the view method defined in the ArticlePolicy.

Blade Directives

You can use the @can directive to display content based on user authorization conditionally.

@can('show', $post)
	<a href="{{ route('article.show', $article)}}">View</a>
@endcan

Additional Features

You define policies for actions that don’t correspond directly to CRUD operations, using gates for more complex authorization logic, and handling authorization exceptions. Laravel Policies provide an elegant solution for managing authorization in the laravel application.

In this article, you have learned about policies in laravel, like how to create a policy class, register a policy, and use policy methods to authorize the users for their actions.

You can check developer tools on the Supertools website. Please give me feedback on this website.

Thank you for reading this article. Please share this article with your friend circle. That’s it for the day. Stay Connected!

Cheers