在laravel 5.2 中正确使用策略？ 我不能

Question

I have a problem, I can not use policies in laravel 5.2.

I have 2 tables, students and tasks .

I try to apply a policy to prevent editing of a task by changing the url, but I always get the message This action is unauthorized although the task is the correct user.

Policy Code:

  <?php

    namespace App\Policies;

    use App\Models\Student;
    use App\Models\Task;

    class TasksPolicy
    {
        public function edit(Student $student, Task $tasks)
        {
            return $student->id === $tasks->student_id;
        }
    }

Code in AuthServiceProvider.php

<?php

    namespace App\Providers;

    use App\Models\Task;
    use App\Policies\TasksPolicy;

    class AuthServiceProvider extends ServiceProvider
    {
        /**
         * The policy mappings for the application.
         *
         * @var array
         */
        protected $policies = [
            Task::class => TasksPolicy::class
        ];

And then the call in the TaskController.php file:

    public function edit($id)
    {
        $tasks = Task::findOrFail($id);
        $this->authorize('edit', $tasks);
        return view('tasks.edit', compact('tasks'));
    }

I think the code is good because I've revised several times, but as I said earlier I always get the message This action is unauthorized although the task is to edit the user.

http://i.imgur.com/2q6WFb3.jpg

What am I doing wrong? As I can use the policy correctly?

Answer 1

you are using "===" which means that both side data and datatype will match.May be your data are matched,not datatype,you may try using "=="

public function edit(Student $student, Task $tasks)
    {
        return $student->id == $tasks->student_id;
    }

Answer 2

Two things: one is the name of the method and the other is the order of parameters. The method name should be 'update', not 'edit' - these are predefined, at least in later versions of Laravel. You might be getting the authorization error because the name 'edit' is not recognized by Laravel, so the policy for update is never defined.

The order of arguments also matters. When there are parameters passed to policy methods, the User model has to be the first parameter, followed by all the others.

public function update(User $user, [... other objects...])

So, you'd have

update(User $user, Student $student, Task $tasks)

Laravel will inject the Authenticated User Model but other objects have to be passed directly.

$this->authorize('edit', $student, $tasks);

Hopefully that will work.

If your Student class extends User Class, you may be thinking that you can substitute Student for User in the method prototype. You can't do that - that's a different method altogether.