gistfile1.txt

Sesi 3 BDV

app/Policies/PostPolicy.php

    public function update(User $user, Post $post)
    {
        return $post->author_id == $user->id;
    }

app/Http/Controllers/PostController.php

public function edit(Post $post)
    {
        $this->authorize('update', $post);
        return view('posts.edit', compact('post'));
    }

resources/views/errors/403.blade.php

@extends('layouts.app')

@section('content')
<div class="container">
    <p>
        Maaf Anda tidak punya akses untuk halaman ini.
    </p>
</div>
@endsection

app/Providers/AuthServiceProvider.php

use App\Post;
use App\Policies\PostPolicy;

class AuthServiceProvider extends ServiceProvider
{
    /**
     * The policy mappings for the application.
     *
     * @var array
     */
    protected $policies = [
        Post::class => PostPolicy::class
    ];

app/Policies/PostPolicy.php

public function update(User $user, Post $post)
    {
        if ($user->isAdmin())  {
            return true;
        }

        return $post->author_id == $user->id;
    }

app/Policies/PostPolicy.php

public function delete(User $user, Post $post)
    {
        if ($user->isAdmin())  {
            return true;
        }

        return $post->author_id == $user->id;
    }

app/Http/Controllers/PostController.php

public function destroy(Post $post)
    {
        $this->authorize('delete', $post);
        $post->delete();
        return redirect()->route('posts.index');
    }