koel/app/Policies/PlaylistPolicy.php

<?php

namespace App\Policies;

use App\Models\Playlist;
use App\Models\User;

class PlaylistPolicy
{
    public function own(User $user, Playlist $playlist): bool
    {
        return $playlist->user->is($user);
    }

    public function download(User $user, Playlist $playlist): bool
    {
        return $this->own($user, $playlist);
    }
}
Use Laravel built-in authorization The comment below motivated me to find a better solution for the repeated authorisation checks: ```php // This can't be put into a Request authorize(), due to Laravel(?)'s limitation. ``` This is the result. 2015-12-14 16:27:26 +00:00			`<?php`

			`namespace App\Policies;`

			`use App\Models\Playlist;`
Satisfy StyleCI 2015-12-15 00:48:48 +00:00			`use App\Models\User;`
Use Laravel built-in authorization The comment below motivated me to find a better solution for the repeated authorisation checks: ```php // This can't be put into a Request authorize(), due to Laravel(?)'s limitation. ``` This is the result. 2015-12-14 16:27:26 +00:00
			`class PlaylistPolicy`
			`{`
feat: support playlist folders (closes #1476) 2022-08-10 14:56:01 +00:00			`public function own(User $user, Playlist $playlist): bool`
Use Laravel built-in authorization The comment below motivated me to find a better solution for the repeated authorisation checks: ```php // This can't be put into a Request authorize(), due to Laravel(?)'s limitation. ``` This is the result. 2015-12-14 16:27:26 +00:00			`{`
feat(test\|api): add PlaylistSong tests 2022-07-27 08:49:33 +00:00			`return $playlist->user->is($user);`
Use Laravel built-in authorization The comment below motivated me to find a better solution for the repeated authorisation checks: ```php // This can't be put into a Request authorize(), due to Laravel(?)'s limitation. ``` This is the result. 2015-12-14 16:27:26 +00:00			`}`
feat: adapt downloading to Plus 2024-01-07 12:43:10 +00:00
			`public function download(User $user, Playlist $playlist): bool`
			`{`
			`return $this->own($user, $playlist);`
			`}`
Use Laravel built-in authorization The comment below motivated me to find a better solution for the repeated authorisation checks: ```php // This can't be put into a Request authorize(), due to Laravel(?)'s limitation. ``` This is the result. 2015-12-14 16:27:26 +00:00			`}`