If you use Laravel gates and policies, chances are they look like this:
useIlluminate\Auth\Access\Response;classUserPolicy{useHandlesAuthorization;publicfunctionviewAny(User$user){if(!$user->hasRole('admin')){Response::deny("you must be admin to view the users");}returnResponse::allow();}}If so, instead of hiding links and button in your views via@can and@cannot, you may want to display a message instead.
To do so, you can simply inspect the gate:
@can('viewAny', User::class) <a href="{{ route('app.user.index') }}">User Index</a>@else You cannot index users because {{ Gate::inspect('viewAny', User::class)->message() }}@cannotRead more about Gates and Responses inThe Laravel Doc
Just a bit further
You may want to add this to your AppServiceProvider as an helper for your Blade templates
classAppServiceProvider{publicfunctionboot(){Blade::directive('reason',function($expression){return"<?php echo Gate::inspect($expression)->message() ?>";});}}And use it like this:
@can('viewAny', User::class) <a href="{{ route('app.user.index') }}">User Index</a>@else You cannot index users because @reason('viewAny', User::class) }}@cannotWhich is slightly prettier.
Top comments(0)
Subscribe
For further actions, you may consider blocking this person and/orreporting abuse
