Middleware

[antonkomarev]

What do you think about middleware?

Something like this for roles:

Route::get('post.create', [
    'as' => 'post.create',
    'middleware' => 'role:admin,editor',
    'uses' => 'PostController@create',
]);

And one more for an ability:

Route::get('post.create', [
    'as' => 'post.create',
    'middleware' => 'ability:create-post',
    'uses' => 'PostController@create',
]);

[JosephSilber]

I don't think having a middleware to check roles is a good idea. Roles are simply a way to give a user abilities. If you want all admins and editors to be able to create posts, give them that ability:

Bouncer::allow('admin')->to('create', Post::class);
Bouncer::allow('editor')->to('create', Post::class);

To check abilities in middleware, use Laravel's Authorize middleware.

[antonkomarev]

wow thanks a lot! This link is exactly what I was looked for.