add TasksPolicy and EventsPolicy

app/Http/Controllers/EventsController.php

@@ -6,6 +6,7 @@ use App\Models\Events;
 use http\Env\Response;
 use Illuminate\Http\Request;
 use Illuminate\Http\JsonResponse;
+use Illuminate\Support\Facades\Gate;
 use Illuminate\Support\Facades\Log;
 use PHPUnit\Event\Event;
 
@@ -13,7 +14,7 @@ class EventsController extends Controller
 {
     public function create(Request $request): JsonResponse
     {
-        if ($request->user()->role != 1) {
+        if (Gate::denies('create', Events::class)) {
             return response()->json(['message' => 'Forbidden'], 403);
         }
 
@@ -37,7 +38,7 @@ class EventsController extends Controller
 
     public function update(Request $request, int $id): JsonResponse {
 
-        if ($request->user()->role != 1) {
+        if (Gate::denies('update', Events::class)) {
             return response()->json(['message' => 'Forbidden'], 403);
         }
 
@@ -76,7 +77,7 @@ class EventsController extends Controller
 
     public function delete(Request $request, int $id): JsonResponse {
 
-        if ($request->user()->role != 1) {
+        if (Gate::denies('delete', Events::class)) {
             return response()->json(['message' => 'Forbidden'], 403);
         }
 

app/Http/Controllers/TasksController.php

@@ -7,20 +7,14 @@ use App\Models\Task;
 use App\Models\User;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Gate;
 use Illuminate\Support\Facades\Log;
 
 class TasksController extends Controller
 {
-
-    public function isAdmin(int $role) {
-        if($role != 1) return false;
-        return true;
-    }
-
-
     public function create(Request $request): JsonResponse {
 
-        if(!$this->isAdmin($request->user()->role)){
+        if(Gate::denies('create', Task::class)) {
             return response()->json(["message" => "Can't create task"], 403);
         }
 
@@ -67,7 +61,7 @@ class TasksController extends Controller
 
     public function assignUser(request $request, int $id): JsonResponse {
 
-        if(!$this->isAdmin($request->user()->role)){
+        if(Gate::denies('assignOther', Task::class)) {
             return response()->json(["message" => "Can't create task"], 403);
         }
 
@@ -108,7 +102,7 @@ class TasksController extends Controller
 
     public function deleteTask(Request $request, int $id): JsonResponse {
 
-        if(!$this->isAdmin($request->user()->role)){
+        if(Gate::denies('delete', Task::class)) {
             return response()->json(["message" => "Can't delete task"], 403);
         }
 
@@ -126,7 +120,7 @@ class TasksController extends Controller
 
     public function update(Request $request, int $id): JsonResponse {
 
-        if(!$this->isAdmin($request->user()->role)){
+        if(Gate::denies('update', Task::class)) {
             return response()->json(["message" => "Forbidden"], 403);
         }