add TasksPolicy and EventsPolicy

app/Http/Controllers/TasksController.php

@@ -7,20 +7,14 @@ use App\Models\Task;
 use App\Models\User;
 use Illuminate\Http\JsonResponse;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Gate;
 use Illuminate\Support\Facades\Log;
 
 class TasksController extends Controller
 {
-
-    public function isAdmin(int $role) {
-        if($role != 1) return false;
-        return true;
-    }
-
-
     public function create(Request $request): JsonResponse {
 
-        if(!$this->isAdmin($request->user()->role)){
+        if(Gate::denies('create', Task::class)) {
             return response()->json(["message" => "Can't create task"], 403);
         }
 
@@ -67,7 +61,7 @@ class TasksController extends Controller
 
     public function assignUser(request $request, int $id): JsonResponse {
 
-        if(!$this->isAdmin($request->user()->role)){
+        if(Gate::denies('assignOther', Task::class)) {
             return response()->json(["message" => "Can't create task"], 403);
         }
 
@@ -108,7 +102,7 @@ class TasksController extends Controller
 
     public function deleteTask(Request $request, int $id): JsonResponse {
 
-        if(!$this->isAdmin($request->user()->role)){
+        if(Gate::denies('delete', Task::class)) {
             return response()->json(["message" => "Can't delete task"], 403);
         }
 
@@ -126,7 +120,7 @@ class TasksController extends Controller
 
     public function update(Request $request, int $id): JsonResponse {
 
-        if(!$this->isAdmin($request->user()->role)){
+        if(Gate::denies('update', Task::class)) {
             return response()->json(["message" => "Forbidden"], 403);
         }