Laravel

Authorization

In addition to providing built-in authentication services, Laravel also provides a simple way to authorize user actions against a given resource. For example, even though a user is authenticated, they may not be authorized to update or delete certain Eloquent models or database records managed by your application. Laravels authorization features provide an easy, organized way of managing these types of authorization checks.
  • Policies MUST use dot notation. Example: @can('post.edit', $post)
  • Try to name abilities using default CRUD words. One exception: replace show with view. A server shows a resource, a user views it.

Ream More:

https://laravel.com/docs/12.x/authorization

Copyright © 2026