Native roles & permissions for Laravel — single-guard, cache-backed, additive-grant registry with Gate integration and zero third-party runtime deps.
roundly-consulting/permissions-for-laravel is a Laravel package for native roles & permissions for laravel — single-guard, cache-backed, additive-grant registry with gate integration and zero third-party runtime deps..
It currently has 5 GitHub stars and 17 downloads on Packagist (latest version 1.0.2).
Install it with composer require roundly-consulting/permissions-for-laravel.
Discover more Laravel packages by roundly-consulting
or browse all Laravel packages to compare alternatives.
Last updated
Roles and permissions for any authenticatable Laravel model — native, single-guard and
cache-backed. Grant roles and direct permissions, resolve the effective set (direct and via
roles), and let Laravel's Gate and can: middleware authorize against them.
Requires PHP 8.4 and Laravel 12 or 13.
composer require roundly-consulting/permissions-for-laravel
php artisan vendor:publish --tag="permissions-migrations"
php artisan migrate
If your users have UUID/ULID keys, set PERMISSIONS_KEY_TYPE (uuid or ulid) before
migrating.
Add HasRoles to your user model:
use Illuminate\Foundation\Auth\User as Authenticatable;
use RoundlyConsulting\Permissions\Concerns\HasRoles;
class User extends Authenticatable
{
use HasRoles;
}
Register permissions, bundle them into a role and assign it:
use RoundlyConsulting\Permissions\Facades\Permissions;
Permissions::permission('posts.view'); // find or create
Permissions::permission('posts.edit');
Permissions::role('editor')->givePermissionTo('posts.view', 'posts.edit');
Permissions::for($user)->assignRole('editor');
Then check them — Laravel's Gate answers for every registered permission:
$user->hasRole('editor'); // true
$user->getAllPermissions()->pluck('name'); // direct + via roles: posts.view, posts.edit
$user->can('posts.edit'); // true
Route::get('/posts', PostsController::class)->middleware('can:posts.view');
The full documentation — configuration, every feature and its API, and testing — lives on our website: roundly-consulting.com/open-source/docs/permissions-for-laravel
Release notes are in CHANGELOG.md. To contribute, see the contributing guide.
This package is free and open source, built and maintained by Roundly Consulting. If it saves you time, please consider supporting our open-source work — a one-time donation, a monthly pledge on Patreon or a crypto donation helps fund maintenance, new features and new packages.
The MIT License (MIT). Copyright (c) Roundly Consulting. See LICENSE.md.