Auth: user take an other user session

In the laravel 6 from scratch video series, there are 2 free authorization videos.

It's not enough to just authenticate, you need to set policies of who can do what.

You have to let authentication work with authorization.

You need something like this spatie example:

spatie example:
public function update(Request $request, Post $post) {
    if ($post->author !== auth()->user()->id || auth()->user()->cannot('edit posts'))
        abort(404);// or some other 
    }
}

Just example there, study authorization in the docs, and view some videos.

thank you for your message,

but the problem is the session change user information, like if the user 1 session take the user 2 information and you will find your self connected with an other user than you

Have you checked the axios issues. But I still think authorization is not set up.

Even right on this forum, without authorization in place, I could edit your post.

RBAC is what controls what a logged in user can and cannot do. If using nodes see.

https://stackoverflow.com/questions/49482429/axios-on-nodejs-wont-retain-session-on-requested-server-while-postman-does

@m4riachi I have the same situation. Did you find any solutions for this?