FEATURE: add another permissions

app/Policies/BasicPolicy.php

@@ -28,6 +28,13 @@ abstract class BasicPolicy
      * @return bool
      */
     public function manage(User $user) {
+        if (!$user->hasAbility($this->entity.'-management')) {
+//            echo "<pre>";
+//            debug_print_backtrace();
+//            echo "</pre>";
+//            die();
+        }
+
         return $user->hasAbility($this->entity.'-management');
     }
 

app/Policies/UserPolicy.php

@@ -10,6 +10,30 @@ class UserPolicy extends BasicPolicy
     use HandlesAuthorization;
     protected $entity = 'users';
 
+    public function before(User $user, $ability)
+    {
+        if ($ability === 'view')
+            return null;
+
+        return parent::before($user, $ability);
+    }
+
+    /**
+     * Can user see other users?
+     *
+     * @param User $currentUser
+     * @param User $user
+     *
+     * @return bool
+     */
+    public function view(User $currentUser, User $user) {
+        // user can se himself
+        if ($currentUser->id == $user->id)
+            return true;
+
+        return $this->manage($currentUser);
+    }
+
     /**
      * Can current user updates other users (or himself?)
      *