Level 75
You should perhaps:
- Work the examples from docs
- Watch Jeffrey's videos on Authorization and Authentication
Yes basically a policy is for example
- An admin can do this and that
- A user can do only that, not this
The gate works with the policy, like:
- No user allowed beyond me, but admin is okay.
- Or, you can not pass me unless the policy allows it.
Just a simplified explanation. An yes it can be over whelming at first.
Remember however simple auth is also there without having to mess with the gates and policies. I view gates and policies for larger complex sites with many roles and permissions.