FEATURE #2048: prepare routes for ACL, add some more permissions

app/Models/FileManager/ModelTraits/File.php

@@ -6,6 +6,7 @@ use App\Events\UploadFile;
 use App\Models\FileManager\File as FileModel;
 use Illuminate\Support\Facades\Auth;
 use Illuminate\Support\Facades\Event;
+use Illuminate\Support\Facades\Gate;
 use Symfony\Component\HttpFoundation\File\File as SymphonyFile;
 use Symfony\Component\HttpFoundation\File\UploadedFile;
 
@@ -36,6 +37,8 @@ trait File
      */
     public function upload(UploadedFile $file, $data = [])
     {
+        abort_unless(Auth::user()->can('upload', FileModel::class), 403);
+
         $data = (object)$data;
 
         $destination = config('app.upload_path');