Merge pull request #1 from pszucs/reproduce-issue-378

Reproduce JosephSilber/bouncer#378
JosephSilber · Jan 20, 2019 · 8301307 · 8301307
2 parents 68e368e + faab920
commit 8301307
Show file tree

Hide file tree

Showing 3 changed files with 23 additions and 3 deletions.
diff --git a/app/Http/Controllers/UsersController.php b/app/Http/Controllers/UsersController.php
@@ -8,7 +8,7 @@ class UsersController extends Controller
 {
     public function index()
     {
-        $this->authorize('view', User::class);
+        // $this->authorize('view', User::class);
 
         return User::all();
     }

diff --git a/database/seeds/DatabaseSeeder.php b/database/seeds/DatabaseSeeder.php
@@ -12,6 +12,18 @@ class DatabaseSeeder extends Seeder
      */
     public function run()
     {
-        factory(User::class)->create()->allow('view', User::class);
+        // Bouncer::ability()->create([
+        //     'name' => 'read-users'
+        // ]);
+        Bouncer::allow('superadmin')->everything();
+
+        $user = User::create([
+            'name' => 'Bouncer Test',
+            'email' => 'test@example.org',
+            'password' => 'supersecretpwd'
+        ]);
+
+        // Bouncer::allow($user)->to('read-users');
+        Bouncer::assign('superadmin')->to($user);
     }
 }
diff --git a/routes/web.php b/routes/web.php
@@ -11,4 +11,12 @@
 |
 */
 
-Route::get('users', 'UsersController@index');
+Route::middleware(['auth'])->group(function () {
+    Route::group([
+        'middleware' => ['can:read-users'],
+        'prefix' => 'users',
+        'as' => 'users.'
+    ], function () {
+        Route::get('/', ['as' => 'index', 'uses' => 'UsersController@index']);
+    });
+});