站点权限部署

app/Policies/Policy.php

@@ -8,15 +8,11 @@ class Policy
 {
     use HandlesAuthorization;
 
-    public function __construct()
+    public function before($user, $ability)
     {
-        //
+        // 如果用户拥有管理内容的权限的话，即授权通过
+        if ($user->can('manage_contents')) {
+            return true;
+        }
     }
-
-    public function before($user, $ability)
-	{
-	    // if ($user->isSuperAdmin()) {
-	    // 		return true;
-	    // }
-	}
 }

app/Providers/AppServiceProvider.php

@@ -13,7 +13,9 @@ class AppServiceProvider extends ServiceProvider
      */
     public function register()
     {
-        //
+        if (app()->isLocal()) {
+            $this->app->register(\VIACreative\SudoSu\ServiceProvider::class);
+        }
     }
 
     /**

app/Providers/AuthServiceProvider.php

@@ -32,5 +32,10 @@ public function boot()
             // 动态返回模型对应的策略名称，如：// 'App\Model\User' => 'App\Policies\UserPolicy',
             return 'App\Policies\\'.class_basename($modelClass).'Policy';
         });
+
+        \Horizon::auth(function ($request) {
+            // 是否是站长
+            return \Auth::user()->hasRole('Founder');
+        });
     }
 }

composer.json

@@ -21,7 +21,8 @@
         "overtrue/pinyin": "~4.0",
         "predis/predis": "~1.1",
         "spatie/laravel-permission": "~3.0",
-        "summerblue/laravel-active": "6.*"
+        "summerblue/laravel-active": "6.*",
+        "viacreative/sudo-su": "~1.1"
     },
     "require-dev": {
         "barryvdh/laravel-debugbar": "~3.2",

config/sudosu.php

@@ -0,0 +1,10 @@
+<?php
+
+return [
+
+    // 允许使用的顶级域名
+    'allowed_tlds' => ['dev', 'local', 'test'],
+
+    // 用户模型
+    'user_model' => App\Models\User::class
+];

resources/views/layouts/app.blade.php

@@ -35,6 +35,10 @@
     @include('layouts._footer')
   </div>
 
+  @if (app()->isLocal())
+    @include('sudosu::user-selector')
+  @endif
+
   <!-- Scripts -->
   <script src="{{ mix('js/app.js') }}"></script>