You cannot edit this post.
@endcannot ``` ### Creating Policies ```php isHades()) { return true; } // Enforce workspace isolation if ($model instanceof Post && $user->workspace_id !== $model->workspace_id) { return false; } return null; // Continue to specific method } public function viewAny(User $user): bool { return $user->hasPermission('posts.view'); } public function view(User $user, Post $post): bool { return $user->hasPermission('posts.view'); } public function create(User $user): bool { return $user->hasPermission('posts.create'); } public function update(User $user, Post $post): bool { return $user->hasPermission('posts.edit') || $user->id === $post->author_id; } public function delete(User $user, Post $post): bool { return $user->hasRole('admin') || ($user->hasPermission('posts.delete') && $user->id === $post->author_id); } public function publish(User $user, Post $post): bool { return $user->hasPermission('posts.publish') && $post->status !== 'archived'; } } ``` ## Complete Module Example Here is a complete example of an admin module with menus, modals, and authorization. ### Directory Structure ``` Mod/Blog/ ├── Boot.php ├── Models/ │ └── Post.php ├── Policies/ │ └── PostPolicy.php ├── View/ │ ├── Blade/ │ │ └── admin/ │ │ ├── posts-list.blade.php │ │ └── post-editor.blade.php │ └── Modal/ │ └── Admin/ │ ├── PostsList.php │ └── PostEditor.php └── Routes/ └── admin.php ``` ### Boot.php ```php 'onAdminPanel', ]; public function boot(): void { // Register policy Gate::policy(Post::class, PostPolicy::class); } public function onAdminPanel(AdminPanelBooting $event): void { // Views $event->views('blog', __DIR__.'/View/Blade'); // Routes $event->routes(fn () => require __DIR__.'/Routes/admin.php'); // Menu app(AdminMenuRegistry::class)->register($this); // Livewire components $event->livewire('blog.admin.posts-list', View\Modal\Admin\PostsList::class); $event->livewire('blog.admin.post-editor', View\Modal\Admin\PostEditor::class); } public function adminMenuItems(): array { return [ [ 'group' => 'services', 'priority' => self::PRIORITY_NORMAL, 'entitlement' => 'core.srv.blog', 'permissions' => ['posts.view'], 'item' => fn () => [ 'label' => 'Blog', 'icon' => 'newspaper', 'href' => route('admin.blog.posts'), 'active' => request()->routeIs('admin.blog.*'), 'color' => 'blue', 'badge' => $this->getDraftCount(), 'children' => [ [ 'label' => 'All Posts', 'href' => route('admin.blog.posts'), 'icon' => 'document-text', 'active' => request()->routeIs('admin.blog.posts'), ], [ 'label' => 'Create Post', 'href' => route('admin.blog.posts.create'), 'icon' => 'plus', 'active' => request()->routeIs('admin.blog.posts.create'), ], ], ], ], ]; } protected function getDraftCount(): ?int { $count = Post::draft()->count(); return $count > 0 ? $count : null; } } ``` ### Routes/admin.php ```php prefix('admin/blog') ->name('admin.blog.') ->group(function () { Route::get('/posts', PostsList::class)->name('posts'); Route::get('/posts/create', PostEditor::class)->name('posts.create'); Route::get('/posts/{post}/edit', PostEditor::class)->name('posts.edit'); }); ``` ### View/Modal/Admin/PostsList.php ```php resetPage(); } #[Computed] public function posts() { return Post::query() ->when($this->search, fn ($q) => $q->where('title', 'like', "%{$this->search}%")) ->when($this->status, fn ($q) => $q->where('status', $this->status)) ->orderByDesc('created_at') ->paginate(20); } public function delete(int $postId): void { $post = Post::findOrFail($postId); $this->authorize('delete', $post); $post->delete(); session()->flash('success', 'Post deleted.'); } public function render(): View { return view('blog::admin.posts-list'); } } ``` ### View/Blade/admin/posts-list.blade.php ```blade| Title | Status | Date | Actions |
|---|---|---|---|
| {{ $post->title }} | {{ ucfirst($post->status) }} | {{ $post->created_at->format('M d, Y') }} | @can('update', $post) Edit @endcan @can('delete', $post) @endcan |
| No posts found. | |||