FEATURE #2048: prepare routes for ACL, add some more permissions

app/Policies/BasicPolicy.php

@@ -4,17 +4,43 @@ namespace App\Policies;
 
 use App\Models\User;
 use Illuminate\Auth\Access\HandlesAuthorization;
+use Illuminate\Database\Eloquent\Model;
 
 abstract class BasicPolicy
 {
     use HandlesAuthorization;
 
+    protected $entity;
+
     public function before(User $user, $ability)
     {
-        if ($user->role == User::ROLE_ADMIN) {
-            return true;
+        // check if user can operate on given entity
+        if (!$this->manage($user)) {
+            return false;
         }
+    }
 
-        return null;
+    /**
+     * Can user manage given entity?
+     *
+     * @param User $user
+     *
+     * @return bool
+     */
+    public function manage(User $user) {
+        return $user->hasAbility($this->entity.'-management');
+    }
+
+    /**
+     * Determine whether the user can delete the content.
+     *
+     * @param  \App\Models\User $user
+     * @param Model             $model
+     *
+     * @return mixed
+     */
+    public function delete(User $user, Model $model)
+    {
+        return $user->hasAbility('delete-'.$this->entity);
     }
 }