controllerのリファクタリングをしたい

前提・実現したいこと

laraveで掲示板アプリを作っていますその際に、controllerの記述をリファクタリングし、スッキリさせたいと考えているのですが、なかなかうまくいっていません。
特に下記の記述が何度もでるため、どこかにまとめたいと考えています。

if (!(\Auth::user()->can('admin') || \Auth::user()->id == $post->user_id)) {
        abort(403);
      }

アドバイスいただけると幸いです。

該当のソースコード

php
1sample/src/app/Http/Controllers/PostsController.php
2
3<?php
4
5namespace App\Http\Controllers;
6
7use Illuminate\Http\Request;
8use App\Post;
9use App\Http\Requests\PostRequest;
10use Illuminate\Support\Facades\Auth;
11
12
13
14class PostsController extends Controller
15{
16  public function __construct()
17  {
18    $this->middleware('auth')->except(['index', 'show']);
19  }
20
21
22  public function index()
23  {
24    $posts = Post::orderBy('created_at', 'desc')->paginate(10);
25    return view('bbs.index', ['posts' => $posts]);
26  }
27
28  public function show(Request $request, $id)
29  {
30    $post = Post::findOrFail($id);
31
32    return view('bbs.show', [
33      'post' => $post,
34    ]);
35  }
36
37  public function create()
38  {
39    return view('bbs.create');
40  }
41
42  public function store(PostRequest $request)
43  {
44    $savedata = [
45      'name' => $request->name,
46      'subject' => $request->subject,
47      'message' => $request->message,
48      'user_id' => Auth::id(),
49
50    ];
51
52    $post = new Post;
53    $post->fill($savedata)->save();
54
55    return redirect('/bbs')->with('poststatus', '新規投稿しました');
56  }
57
58  public function edit($post_id)
59  {
60
61    $post = Post::findOrFail($post_id); {
62      if (!(\Auth::user()->can('admin') || \Auth::user()->id == $post->user_id)) {
63        abort(403);
64      }
65    }
66    return view('bbs.edit', ['post' => $post]);
67  }
68
69  public function update(PostRequest $request, Post $post)
70  { {
71      if (!(\Auth::user()->can('admin') || \Auth::user()->id == $post->user_id)) {
72        abort(403);
73      }
74    }
75    $savedata = [
76      'name' => $request->name,
77      'subject' => $request->subject,
78      'message' => $request->message,
79      'user_id' =>  Auth::user()->id,
80
81    ];
82
83    $post = new Post;
84    $post->fill($savedata)->save();
85
86    return redirect('/bbs')->with('poststatus', '投稿を編集しました');
87  }
88
89
90  public function destroy($id)
91  {
92    $post = Post::findOrFail($id); {
93      if (!(\Auth::user()->can('admin') || \Auth::user()->id == $post->user_id)) {
94        abort(403);
95      }
96    }
97    $post->comments()->delete();
98    $post->delete();
99
100    return redirect('/bbs')->with('poststatus', '投稿を削除しました');
101  }
102}
103

試したこと

policyを利用しようとしましたが、自分の理解が浅くうまく実装できていません。
エラーはとくにでず、
ログインしたユーザーが他の人が投稿した記事を編集できる状況になっています。

php
1
2sample/src/app/Policies/PostPolicy.php
3<?php
4
5namespace App\Policies;
6
7use App\Post;
8use App\User;
9use Illuminate\Auth\Access\HandlesAuthorization;
10
11class PostPolicy
12{
13  use HandlesAuthorization;
14
15  /**
16   * Determine whether the user can view any posts.
17   *
18   * @param  \App\User  $user
19   * @return mixed
20   */
21  public function viewAny(User $user)
22  {
23    //
24  }
25
26  /**
27   * Determine whether the user can view the post.
28   *
29   * @param  \App\User  $user
30   * @param  \App\Post  $post
31   * @return mixed
32   */
33  public function view(User $user, Post $post)
34  {
35    //
36  }
37
38  /**
39   * Determine whether the user can create posts.
40   *
41   * @param  \App\User  $user
42   * @return mixed
43   */
44  public function edit(Post $post)
45  {
46    if (!(\Auth::user()->can('admin') || \Auth::user()->id == $post->user_id)) {
47      abort(403);
48  }
49
50  /**
51   * Determine whether the user can update the post.
52   *
53   * @param  \App\User  $user
54   * @param  \App\Post  $post
55   * @return mixed
56   */
57  public function update(User $user, Post $post)
58  {
59    if (!(\Auth::user()->can('admin') || \Auth::user()->id == $post->user_id)) {
60      abort(403);
61  }
62

php
1
2sample/src/app/Providers/AuthServiceProvider.php
3
4<?php
5
6namespace App\Providers;
7
8use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
9use Illuminate\Support\Facades\Gate;
10
11class AuthServiceProvider extends ServiceProvider
12{
13  /**
14   * The policy mappings for the application.
15   *
16   * @var array
17   */
18  protected $policies = [
19    Post::class => PostPolicy::class,
20  ];
21
22  /**
23   * Register any authentication / authorization services.
24   *
25   * @return void
26   */
27  public function boot()
28  {
29
30    $this->registerPolicies();
31  }
32}
33

php
1sample/src/app/Http/Controllers/PostsController.php
2
3<?php
4
5namespace App\Http\Controllers;
6
7use Illuminate\Http\Request;
8use App\Post;
9use App\Http\Requests\PostRequest;
10use Illuminate\Support\Facades\Auth;
11
12
13class PostsController extends Controller
14{
15  public function __construct()
16  {
17    $this->middleware('auth')->except(['index', 'show']);
18  }
19
20
21  public function index()
22  {
23    $posts = Post::orderBy('created_at', 'desc')->paginate(10);
24    return view('bbs.index', ['posts' => $posts]);
25  }
26
27  public function show(Request $request, $id)
28  {
29    $post = Post::findOrFail($id);
30
31    return view('bbs.show', [
32      'post' => $post,
33    ]);
34  }
35
36  public function create()
37  {
38    return view('bbs.create');
39  }
40
41  public function store(PostRequest $request)
42  {
43    $savedata = [
44      'name' => $request->name,
45      'subject' => $request->subject,
46      'message' => $request->message,
47      'user_id' => Auth::id(),
48
49    ];
50
51    $post = new Post;
52    $post->fill($savedata)->save();
53
54    return redirect('/bbs')->with('poststatus', '新規投稿しました');
55  }
56
57  public function edit($post_id)
58  {
59    $post = Post::findOrFail($post_id);
60    return view('bbs.edit', ['post' => $post]);
61  }
62
63  public function update(PostRequest $request, Post $post)
64  {
65    $savedata = [
66      'name' => $request->name,
67      'subject' => $request->subject,
68      'message' => $request->message,
69      'user_id' =>  Auth::user()->id,
70
71    ];
72
73    $post = new Post;
74    $post->fill($savedata)->save();
75
76    return redirect('/bbs')->with('poststatus', '投稿を編集しました');
77  }
78
79
80  public function destroy($id)
81  {
82    $post = Post::findOrFail($id); {
83      if (!(\Auth::user()->can('admin') || \Auth::user()->id == $post->user_id)) {
84        abort(403);
85      }
86    }
87    $post->comments()->delete();
88    $post->delete();
89
90    return redirect('/bbs')->with('poststatus', '投稿を削除しました');
91  }
92}
93