Laravel Security

Priority: P0 (CRITICAL)

Workflow: Secure Resource

1. Generate policy — php artisan make:policy PostPolicy --model=Post.
2. Implement policy methods — Return bool for view, update, delete actions.
3. Authorize in controller — Call $this->authorize('update', $post).
4. Add Gate bypass — Define Gate::before() for admin users in AuthServiceProvider.
5. Validate inputs — Use Form Request with $request->validated() for Model::create().

Policy Example

See implementation examples for Policy class with controller authorization.

Implementation Guidelines

Authorization & RBAC