在Laravel中，@can Blade指令用於在視圖中檢查用戶是否有權限執(zhí)行特定操作。 1.基本用法是@can('能力名', 模型)，例如顯示“編輯”按鈕時使用@can('edit-post', $post)包裹鏈接；2.可結合@else或@cannot指令處理無權限時的替代內容；3.若策略方法需要多個參數，可通過數組傳遞，如@can('update-comment', [$comment, $post])；4.對於不涉及模型的全局權限，可直接使用@can('manage-settings')進行檢查。該指令簡化了視圖中的授權邏輯，使模板更清晰易讀，同時確保用戶僅能看到其有權限訪問的內容。

In Laravel, the @can Blade directive is a straightforward way to check if a user has permission to perform a specific action in your views. You don't need to handle authorization logic directly in your templates — @can keeps things clean and readable by wrapping conditional view elements based on permissions.

How to Use the Basic @can Directive

The most common use of @can is checking whether a user can perform a specific action. For example, you might want to show an "Edit" button only if the user is allowed to edit a post.

 @can('edit-post', $post)
    <a href="{{ route(&#39;posts.edit&#39;, $post) }}">Edit Post</a>
@endcan

Here, 'edit-post' is the name of the ability or policy method you're checking, and $post is the model instance being evaluated.

This works if you've already defined the corresponding authorization logic either in a policy or via the Gate facade in a service provider.

Tip: If you're using policies, make sure the model (like Post ) is registered with its matching policy in the AuthServiceProvider .

Combining @can With Other Directives Like @else and @cannot

Sometimes you want to display alternative content when a user doesn't have permission. You can combine @can with @else or use the @cannot directive for clarity.

 @can('delete-post', $post)
    <button>Delete Post</button>
@else
    <p>You are not allowed to delete this post.</p>
@endcan

Or:

 @cannot('delete-post', $post)
    <p>You cannot delete this post.</p>
@endcannot

These variations help you write more expressive templates without falling back to raw PHP conditionals.

Passing Multiple Parameters to Policies

If your policy method requires multiple parameters (for example, checking if a user can update a comment on a specific post), you can pass them as an array.

 @can('update-comment', [$comment, $post])
    <a href="{{ route(&#39;comments.edit&#39;, $comment) }}">Edit Comment</a>
@endcan

In this case, your policy's update method should accept both the user, the comment, and the post:

 public function update(User $user, Comment $comment, Post $post)
{
    return $user->id === $comment->user_id;
}

Just make sure the order matches what your policy expects.

Using @can Without a Model (For General Abilities)

Not all permissions relate to a specific model. For global abilities like "manage-settings", you can skip the model entirely:

 @can('manage-settings')
    <a href="{{ route(&#39;settings&#39;) }}">Manage Site Settings</a>
@endcan

This checks if the user has that general capability, which might be defined like this in a service provider:

 Gate::define('manage-settings', function ($user) {
    return $user->hasRole('admin');
});

You can also define this in a dedicated policy if needed, but it's often simpler to use gates for global permissions.

That's basically how you work with @can in Blade. It's not complicated, but it helps keep your UI consistent with your app's access rules — and avoids showing buttons or links users shouldn't see in the first place.

以上是如何使用@Can Blade指令來檢查授權權限？的詳細內容。更多資訊請關注PHP中文網其他相關文章！