Add manage contents permission and visit horizon dashboard permission

app/Policies/Policy.php

@@ -15,8 +15,9 @@ public function __construct()
 
     public function before($user, $ability)
 	{
-	    // if ($user->isSuperAdmin()) {
-	    // 		return true;
-	    // }
+	    // 如果用户拥有管理内容的权限的话，即授权通过
+        if ($user->can('manage_contents')) {
+            return true;
+        }
 	}
 }

app/Providers/AppServiceProvider.php

@@ -29,6 +29,9 @@ public function boot()
      */
     public function register()
     {
-        //
+        // 用户切换工具 sudo-su
+        if (app()->isLocal()) {
+            $this->app->register(\VIACreative\SudoSu\ServiceProvider::class);
+        }
     }
 }

app/Providers/AuthServiceProvider.php

@@ -28,6 +28,9 @@ public function boot()
     {
         $this->registerPolicies();
 
-        //
+        \Horizon::auth(function ($request) {
+            // 是否是站长
+            return \Auth::user()->hasRole('Founder');
+        });
     }
 }

composer.json

@@ -18,7 +18,8 @@
         "overtrue/laravel-lang": "~3.0",
         "overtrue/pinyin": "~3.0",
         "predis/predis": "~1.0",
-        "spatie/laravel-permission": "~2.7"
+        "spatie/laravel-permission": "~2.7",
+        "viacreative/sudo-su": "~1.1"
     },
     "require-dev": {
         "barryvdh/laravel-debugbar": "~3.1",

config/sudosu.php

@@ -0,0 +1,32 @@
+<?php
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Allowed TLDs - Use with caution!
+    |--------------------------------------------------------------------------
+    |
+    | This is to prevent mis-usage during production if debug mode is
+    | unintentionally left active. The package will detect the site
+    | URL and if the TLD isn't present in this array, it will not
+    | activate. If your development TLD is different to .dev or
+    | .local, simply add it to the arrow below.
+    |
+     */
+
+    'allowed_tlds' => ['dev', 'local', 'test'],
+
+    /*
+    |--------------------------------------------------------------------------
+    | User Model
+    |--------------------------------------------------------------------------
+    |
+    | Path to the application User model. This will be used to retrieve the users
+    | displayed in the select dropdown. This must be an Eloquent Model instance.
+    |
+     */
+
+    'user_model' => App\Models\User::class
+
+];

resources/views/layouts/app.blade.php

@@ -31,6 +31,11 @@
         @include('layouts._footer')
     </div>
 
+    <!-- 用户切换工具 sudo-su 植入 -->
+    @if (app()->isLocal())
+        @include('sudosu::user-selector')
+    @endif
+
     <!-- Scripts -->
     <script src="{{ asset('js/app.js') }}"></script>
     @yield('scripts')