FEATURE: add another permissions

app/Policies/UserPolicy.php

@@ -10,6 +10,30 @@ class UserPolicy extends BasicPolicy
     use HandlesAuthorization;
     protected $entity = 'users';
 
+    public function before(User $user, $ability)
+    {
+        if ($ability === 'view')
+            return null;
+
+        return parent::before($user, $ability);
+    }
+
+    /**
+     * Can user see other users?
+     *
+     * @param User $currentUser
+     * @param User $user
+     *
+     * @return bool
+     */
+    public function view(User $currentUser, User $user) {
+        // user can se himself
+        if ($currentUser->id == $user->id)
+            return true;
+
+        return $this->manage($currentUser);
+    }
+
     /**
      * Can current user updates other users (or himself?)
      *