Gate

Create a new access response.

Throw an unauthorized exception.

Deny with a HTTP status code.

Deny with a 404 HTTP status code.

Create a new gate instance.

Determine if a given ability has been defined.

Perform an on-demand authorization check. Throw an authorization exception if the condition or callback is false.

Perform an on-demand authorization check. Throw an authorization exception if the condition or callback is true.

Authorize a given condition or callback.

Define a new ability.

Boot-only. The definition persists on the singleton Gate for the worker lifetime and affects authorization in every subsequent request.

Define abilities for a resource.

Boot-only. The definitions persist on the singleton Gate for the worker lifetime and affect authorization in every subsequent request.

Create the ability callback for a callback string.

Define a policy class for a given class type.

Boot-only. The policy persists on the singleton Gate for the worker lifetime and affects authorization in every subsequent request.

Register a callback to run before all Gate checks.

Boot-only. The callback persists on the singleton Gate for the worker lifetime and runs during authorization in every subsequent request.

Register a callback to run after all Gate checks.

Boot-only. The callback persists on the singleton Gate for the worker lifetime and runs during authorization in every subsequent request.

Determine if all of the given abilities should be granted for the current user.

Determine if any of the given abilities should be denied for the current user.

Determine if all of the given abilities should be granted for the current user.

Determine if any one of the given abilities should be granted for the current user.

Determine if all of the given abilities should be denied for the current user.

Determine if the given ability should be granted for the current user.

Inspect the user for the given ability.

Get the raw result from the authorization callback.

Determine whether the callback/method can be called with the given user.

Determine if the given class method allows guests.

Determine if the callback allows guests.

Determine if the given parameter allows guests.

Resolve and call the appropriate authorization callback.

Call all of the before callbacks and return if a result is given.

Call all of the after callbacks with check result.

Dispatch a gate evaluation event.

Resolve the callable for the given ability and arguments.

Get a policy instance for a given class.

Get the policy class from the UsePolicy attribute.

Guess the policy name for the given class.

Specify a callback to be used to guess policy names.

Boot-only. The callback persists on the singleton Gate for the worker lifetime and affects policy discovery in every subsequent request.

Build a policy class instance of the given type.

Resolve the callback for a policy check.

Call the "before" method on the given policy, if applicable.

Call the appropriate method on the given policy.

Format the policy ability into a method name.

Get a gate instance for the given user.

Resolve the user from the user resolver.

Get all of the defined abilities.

Get all of the defined policies.

Set the default denial response for gates and policies.

Boot-only. The response persists on the singleton Gate for the worker lifetime and affects authorization failures in every subsequent request.

Set the container instance used by the gate.

Tests only. Swaps the container on the singleton Gate used by every coroutine; per-request use races across coroutines and breaks every concurrent authorization check.

Apply the policy's scope method to filter a query to authorized rows.

Runs before() callbacks first. If a before callback returns true (allow all), the query is returned unmodified. If it returns false (deny all), a "no rows" constraint is added. If null (no opinion), the policy's *Scope method is called.

After callbacks are not run — they expect a boolean result, not a Builder.

Get a SQL expression from the policy for per-row authorization.

Runs before() callbacks first. If a before callback returns true, DB::raw('true') is returned. If false, DB::raw('false'). If null, the policy's *Select method is called.

After callbacks are not run — they expect a boolean result, not an Expression.

Accepts a Builder for full query context, or a model class/instance as shorthand (internally creates a fresh query).

Flush all static state.