The correct way to use permissions to filter data?

[singleseeker]

For example,

We have two roles, admin and user, also a model article.

admin -- could get all articles
user -- could get all own articles, all articles whose status is published

What should we do, shell we check the permission in the controller, or add a scope in the model?

[erikn69]

Overwrite checkPermissionTo adding your custom check

laravel-permission/src/Traits/HasPermissions.php

Line 202 in 6a3ed62

public function checkPermissionTo($permission, $guardName = null): bool

[singleseeker]

Good job, thank you for ur help.