Authorization overhaul

app/Http/Controllers/ActorController.php

@@ -5,15 +5,16 @@
 use App\Actor;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Facades\Gate;
 
 class ActorController extends Controller
 {
  public function index(Request $request)
  {
- $this->authorize('viewAny', Actor::class);
+ Gate::authorize('readonly');
  $actor = new Actor;
  if ($request->filled('Name')) {
- $actor = $actor->where('name', 'like', $request->Name.'%');
+ $actor = $actor->where('name', 'like', $request->Name . '%');
  }
  switch ($request->selector) {
  case 'phy_p':
@@ -34,7 +35,7 @@ public function index(Request $request)
 
  public function create()
  {
- $this->authorize('create', Actor::class);
+ Gate::authorize('readwrite');
  $table = new Actor;
  //TODO getTableComments is the same as in Rule.php. To render common
  $actorComments = $table->getTableComments('actor');
@@ -44,7 +45,7 @@ public function create()
 
  public function store(Request $request)
  {
- $this->authorize('create', Actor::class);
+ Gate::authorize('readwrite');
  $request->validate([
  'name' => 'required|max:100',
  'email' => 'email|nullable',
@@ -56,7 +57,7 @@ public function store(Request $request)
 
  public function show(Actor $actor)
  {
- $this->authorize('view', $actor);
+ Gate::authorize('readonly');
  $actorInfo = $actor->load(['company:id,name', 'parent:id,name', 'site:id,name', 'droleInfo', 'countryInfo:iso,name', 'country_mailingInfo:iso,name', 'country_billingInfo:iso,name', 'nationalityInfo:iso,name']);
  $actorComments = $actor->getTableComments('actor');
 
@@ -70,7 +71,7 @@ public function edit(Actor $actor)
 
  public function update(Request $request, Actor $actor)
  {
- $this->authorize('update', $actor);
+ Gate::authorize('readwrite');
  $request->validate([
  'email' => 'email|nullable',
  'ren_discount' => 'numeric',
@@ -83,7 +84,7 @@ public function update(Request $request, Actor $actor)
 
  public function destroy(Actor $actor)
  {
- $this->authorize('delete', $actor);
+ Gate::authorize('readwrite');
  $actor->delete();
 
  return $actor;