feat: secure adminer etc ...

app/Providers/AppServiceProvider.php

@@ -82,16 +82,7 @@ class AppServiceProvider extends ServiceProvider
                 ->to($notifiable->getEmailForPasswordReset())
         );
 
-        Gate::define('viewApiDocs', function ($user = null) {
-            // Option A : Autoriser tout le monde (Attention : la doc sera publique hors local)
-            return true;
-
-            /* // Option B : Autoriser seulement certains emails
-            return in_array($user?->email, [
-                'admin@tondomaine.com',
-            ], true);
-            */
-        });
+        Gate::define('viewApiDocs', fn (?User $user): bool => $user?->isAdmin() === true);
 
         Health::checks([
             DatabaseCheck::new(),

app/Providers/Filament/DashboardPanelProvider.php

@@ -13,7 +13,6 @@ use Filament\Panel;
 use Filament\PanelProvider;
 use Filament\Support\Colors\Color;
 use Filament\Widgets\AccountWidget;
-use Filament\Widgets\FilamentInfoWidget;
 use Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse;
 use Illuminate\Cookie\Middleware\EncryptCookies;
 use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken;
@@ -42,7 +41,8 @@ class DashboardPanelProvider extends PanelProvider
                     ->url(url('/horizon'), shouldOpenInNewTab: true)
                     ->icon('heroicon-o-queue-list')
                     ->group('Settings')
-                    ->sort(3),
+                    ->sort(3)
+                    ->visible(fn (): bool => auth()->user()?->isAdmin() === true),
             ])
             ->discoverResources(in: app_path('Filament/Resources'), for: 'App\Filament\Resources')
             ->discoverPages(in: app_path('Filament/Pages'), for: 'App\Filament\Pages')

app/Providers/HorizonServiceProvider.php

@@ -2,6 +2,7 @@
 
 namespace App\Providers;
 
+use App\Models\User;
 use Illuminate\Support\Facades\Gate;
 use Laravel\Horizon\Horizon;
 use Laravel\Horizon\HorizonApplicationServiceProvider;
@@ -27,8 +28,6 @@ class HorizonServiceProvider extends HorizonApplicationServiceProvider
      */
     protected function gate(): void
     {
-        Gate::define('viewHorizon', function ($user = null) {
-            return true;
-        });
+        Gate::define('viewHorizon', fn (?User $user): bool => $user?->isAdmin() === true);
     }
 }