Creating Custom Authorization Policies

By default, all Mailcoach backend and API actions are protected by the "viewMailcoach" gate. If this is sufficient for your use case, then no further action is required. However, you may need more fine-grained authorization logic to govern access to different Mailcoach features. In that case, you can create custom authorization policies.

Policies are resolved via the Laravel service container, so swapping out a default policy for one of your own is as simple as binding it in a service provider:

use Spatie\Mailcoach\Domain\Audience\Policies\EmailListPolicy;
...
    public function register()
    {
        app()->bind(EmailListPolicy::class, MyFancyCustomListPolicy::class);
    }
...

Policies are currently supported for the following model/action combinations:

• EmailList
  • "viewAny"
  • "create"
  • "view"
  • "update"
  • "delete"
• Campaign
  • "viewAny"
  • "create"
  • "view"
  • "update"
  • "delete"
• Template
  • "viewAny"
  • "create"
  • "view"
  • "update"
  • "delete"