Using a policy's this-authorize() check in a laravel controller inside a store() method

Question

So I was reading about using laravel policies for granting authorities on the resources of my application but there seems to be a problem there though I followed the tutorial. I have a user model which can't be created via HTTP requests except by other users who have the Entrust role of 'Admin' or 'Broker'. What I understood and succeeded to make it work on other actions like indexing users was the following: Inside the `AuthServiceProvider.php` inside the private `$policies` array, I registered that User class with the `UserPolicy` class like that ``` class AuthServiceProvider extends ServiceProvider { protected $policies = [ 'App\Model' => 'App\Policies\ModelPolicy', User::class => UserPolicy::class, Insured::class => InsuredPolicy::class ]; public function boot(GateContract $gate) { $this->registerPolicies($gate); } } ``` Define the UserPolicy controller class: ``` class UserPolicy { use HandlesAuthorization; protected $user; public function __construct(User $user) { $this->user =…

Accepted Answer

In `store()` function of `UserPolicy::class` you are not passing the User model object:

```
public function store(User $user) {
   $is_authorized = $user->hasRole('Admin');
   return true;
}
```

missing argument `User $user`.

Maybe this is the cause of the problem.

Using a policy's this->authorize() check in a laravel controller inside a store() method

Solution

Problem