Fine-grained Access Control Package

Technologies

• Laravel
• Tailwind

Installation

1. In the terminal:

	composer require laravelroles/rolespermissions

2. Register service provider in file /bootstrap/providers.php

return [
    ...
    Laravelroles\Rolespermissions\RolespermissionsServiceProvider::class,
];

3. Register package middleware in bootstrap/app.php

->withMiddleware(function (Middleware $middleware): void {
        $middleware->alias([
            'bindings' => SubstituteBindings::class,
            'permissions.required' => PermissionsRequiredMiddleware::class
        ]);
    })

4. In terminal:

	php artisan vendor:publish --provider="Laravelroles\Rolespermissions\RolespermissionsServiceProvider"

5. In terminal:

	php artisan migrate

6. In terminal:

	composer dump-autoload

7. In terminal:

	php artisan laravelroles:seeder

8. Class App\Models\User extends Laravelroles\Rolespermissions\Models\User

	use Laravelroles\Rolespermissions\Models\User as BaseUser;


	class User extends BaseUser

	{


	}

9. Set localization in config/app.php - bg or en

10. Log in main program with example user [email protected] and password test

Middleware

Add attribute to the middleware name

Route::resource('salaries', 'SalaryController')->middleware('permissions.required:user_id');

Interfaces

• Users

• Roles

• Permissions

Blade directives

• path($permissionName) - Filters records by condition if the subject (the current user who interacts with the system) is authorized to access the permission $permissionName Example:

@path('posts.edit')
	...
@endpath

• owns($attributeValue) - Filters records by condition if the subject's id is equal to $attributeValue Example:

@owns($attributeValue)
	...
@endowns

• has($attributeValue, $permissionName) - Filters records by condition if the subject's id is equal to $attributeValue OR the user is authorized to access the permission $permissionName

Example:

@has($posts->author_id, 'posts.edit')
	...
@endhas