use Illuminate\Support\Facades\Gate;

public function boot()
{
    $this->registerPolicies();

    // 定义一个 Gate：判断用户是否为管理员
    Gate::define('admin-only', function ($user) {
        return $user->is_admin === true;
    });

    // 动态判断是否可编辑文章
    Gate::define('edit-post', function ($user, $post) {
        return $user->id === $post->user_id;
    });
}

if (Gate::allows('edit-post', $post)) {
    // 允许编辑
}

// 或检查是否具有权限
if (Gate::denies('admin-only')) {
    abort(403);
}

php artisan make:policy PostPolicy --model=Post

class PostPolicy
{
    public function view(User $user, Post $post)
    {
        return $user->id === $post->user_id;
    }

    public function update(User $user, Post $post)
    {
        return $user->id === $post->user_id;
    }

    public function delete(User $user, Post $post)
    {
        return $user->id === $post->user_id || $user->is_admin;
    }
}

use App\Models\Post;
use App\Policies\PostPolicy;

protected $policies = [
    Post::class => PostPolicy::class,
];

if ($user->can('update', $post)) {
    // 执行更新操作
}

public function edit(Post $post)
{
    $this->authorize('edit', $post);

    return view('post.edit', compact('post'));
}

@can('edit', $post)
    <a href="/post/{{ $post->id }}/edit">编辑</a>
@endcan

@cannot('delete', $post)
    <span>无删除权限</span>
@endcannot

@can('create', App\Models\Post::class)
    <a href="/post/create">发布新文章</a>
@endcan