AuthorizeResource does not work in __construct method of RolesController

[illia-sapryga]

Hi everyone.

I have created a resource RolesController which gives ability to my users to view, create, update, delete roles.
I am using spatie roles, permissions package.
I have an issue with $this->authorizeResource() method when I apply it in the __construct method of my RolesController. It does not seem to work, but it works perfectly fine with the rest of my resource controllers. Pretty much I get 403 whether the user has needed permissions or not. I am assuming that is because Role model is the spatie model that I am extending to add some functionality. So I am trying to understand if I am doing something wrong or this is just a bug of the package.

Role.php

<?php

namespace App\Models;

use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Database\Eloquent\SoftDeletes;

class Role extends \Spatie\Permission\Models\Role
{
    use HasFactory, SoftDeletes;
}

RolesController.php

<?php

namespace App\Http\Controllers;

use App\Models\Role;
use Illuminate\Contracts\Foundation\Application;
use Illuminate\Contracts\View\Factory;
use Illuminate\Contracts\View\View;
use Illuminate\Http\RedirectResponse;

class RolesController extends Controller
{
    public function __construct()
    {
        $this->authorizeResource(\Spatie\Permission\Models\Role::class);
//        This is a workaround I am currently using to replicate authorizeResource functionality
//        $this->middleware('can:view any roles', ['only' => ['index']]);
//        $this->middleware('can:create roles', ['only' => ['create']]);
//        $this->middleware('can:update roles', ['only' => ['edit']]);
//        $this->middleware('can:delete roles', ['only' => ['destroy']]);
//        $this->middleware('can:restore roles', ['only' => ['restore']]);
    }

    /**
     * Display a listing of the resource.
     *
     * @return Application|Factory|View
     */
    public function index()
    {
        return view('pages.users.roles.index');
    }

    /**
     * Show the form for creating a new resource.
     *
     * @return Application|Factory|View
     */
    public function create()
    {
        return view('pages.users.roles.create');
    }

    /**
     * Show the form for editing the specified resource.
     *
     * @param Role $role
     * @return Application|Factory|View
     */
    public function edit(Role $role)
    {
        return view('pages.users.roles.edit', compact('role'));
    }

    /**
     * Remove the specified resource from storage.
     *
     * @param Role $role
     * @return RedirectResponse
     */
    public function destroy(Role $role)
    {
        $role->delete();
        return redirect()->route('roles.destroy');
    }

    /**
     * Restore the specified resource from storage.
     *
     * @param Role $role
     * @return RedirectResponse
     */
    public function restore(Role $role)
    {
        $role->restore();
        return redirect()->route('roles.restore');
    }
}

Permissions migration

<?php

use Illuminate\Database\Migrations\Migration;
use Spatie\Permission\Models\Permission;

return new class extends Migration
{
    /**
     * Run the migrations.
     *
     * @return void
     */
    public function up()
    {
        Permission::create(['name' => 'view any roles']);
        Permission::create(['name' => 'create roles']);
        Permission::create(['name' => 'update roles']);
        Permission::create(['name' => 'delete roles']);
        Permission::create(['name' => 'restore roles']);
    }
};

[angeljqv]

So I am trying to understand if I am doing something wrong

pretty sure, yes