koel/app/Policies/UserPolicy.php

<?php

namespace App\Policies;

use App\Models\User;

class UserPolicy
{
    public function destroy(User $currentUser, User $userToDestroy)
    {
        return $currentUser->is_admin && $currentUser->id !== $userToDestroy->id;
    }
}
Use Laravel built-in authorization The comment below motivated me to find a better solution for the repeated authorisation checks: ```php // This can't be put into a Request authorize(), due to Laravel(?)'s limitation. ``` This is the result. 2015-12-14 16:27:26 +00:00			`<?php`

			`namespace App\Policies;`

			`use App\Models\User;`

			`class UserPolicy`
			`{`
			`public function destroy(User $currentUser, User $userToDestroy)`
			`{`
Fix UserPolicy 2015-12-15 10:32:41 +00:00			`return $currentUser->is_admin && $currentUser->id !== $userToDestroy->id;`
Use Laravel built-in authorization The comment below motivated me to find a better solution for the repeated authorisation checks: ```php // This can't be put into a Request authorize(), due to Laravel(?)'s limitation. ``` This is the result. 2015-12-14 16:27:26 +00:00			`}`
			`}`