This package will generate permission names from route names or resources. In many application we create static permission names (ex: create-post, edit-post, delete-post) to check user's accessability, using the package can helps you to generate permission names dynamically. Permission names can be generate panel wise.
Upgrade Note: If you are upgrade to v0.4 then you have to upgrade the older permission-generator config file
- PHP >= 7.1
- Laravel 5.7|6.x|7.x|8.x|9.x|10.x
- JQuery [for view]
- Bootstrap [for view]
You can install the package via composer:
composer require radiatecode/laravel-permission-name-generator
Publish config file
php artisan vendor:publish --provider="RadiateCode\PermissionNameGenerator\PermissionNameServiceProvider" --tag="permission-generator-config"
Publish permission view files (optional)
php artisan vendor:publish --provider="RadiateCode\PermissionNameGenerator\PermissionNameServiceProvider" --tag="permission-views"
It can be usefull when you want to customise the permissions view
Here are some routes
RadiateCode\PermissionNameGenerator\Permissions::make()->fromRoutes()->get();
Output
From controller if you want to set prmission group title, excluded permissions or append permissions to another group then the trait becomes handy. How we use it, implement the WithPermissionGenerator contracts in the controller, then use the PermissionGenerator trait.
Available methods in PermissionGenerator trait
permissionsExclude(...$methods): use to exculde a route from being generated as permission name.permissionsTitle(string $title): Use to set permissions group titlepermissionsAppendTo(string $key): Permissions append to another permission group
Example
use App\Http\Controllers\Controller;
use RadiateCode\LaravelRoutePermission\Contracts\WithPermissionGenerator;
use RadiateCode\LaravelRoutePermission\Traits\PermissionGenerator;
class DepartmentController extends Controller implements WithPermissionGenerator
{
use PermissionGenerator;
public function __construct()
{
$this->permissionsTitle('Department Crud Permissions')
->permissionsExclude('index');// index associate route won't be generated as permission names
}
}Output:
Permission Append Example:
use App\Http\Controllers\Controller;
use App\Http\Controllers\Controller\DepartmentController;
use RadiateCode\LaravelRoutePermission\Contracts\WithPermissionGenerator;
use RadiateCode\LaravelRoutePermission\Traits\PermissionGenerator;
class DesignationController extends Controller implements WithPermissionGenerator
{
use PermissionGenerator;
public function __construct()
{
$this->permissionsAppendTo(DepartmentController::class);
}
}Output:
PermissionGenerator trait is optional. Because if no permission group title defined, then this package dynamically generate a title based on controller name, routes can be excluded in the config, and permission append can be done by
custom-permissionconfig.
The package comes with a view builder to show generated permission names in organised way.
Builder available methods:
make(string $view, array $data = []): set your view.withPermissions(array $permissions): pass generated permission names.markRolePermissions(string $roleName,arra $rolePermissions,string $permissionsSaveUrl = null): This method helps you to mark the stored role's permissions in view so that you can identify which permissions are belongs to the role, you can define a url where you can store/update the permissions of the rolerender(): it render the view along with predefined data ($permissionCards, $permissionScripts), display these data in your blade. See the blade file example below
$request->get('permissions'); // array of permissions
In controller:
use RadiateCode\PermissionNameGenerator\Permissions;
use RadiateCode\PermissionNameGenerator\Facades\PermissionsView;
use App\Models\Role;
class RoleController extends Controller
{
public function permissionsShow($id)
{
$role = Role::query()->findOrFail($id);
// generate permissions from routes
$permissions = Permissions::make()->fromRoutes()->get();
return PermissionsView::make('app.role.permissions')
->withPermissions($permissions)
->markRolePermissions( // helps to mark the stored role's permissions in the view
$role->role_name,
json_decode($role->role_permissions), // assume role permissions stored as json encoded
route('create-role-permission', $role->id) // permission save url for a role
)->render();
}
}In app/role/permissions.blade.php file:
@extends('demo.layouts.app')
@section('content')
<div class="row">
<div class="col-12">
<div class="card card-dark">
<div class="card-header">
<h3 class="card-title">Role Permissions</h3>
</div>
<div class="card-body">
<!-- Comes from PermissionView Builder -->
{!! $permissionCards !!}
</div>
</div>
</div>
</div>
@endsection
@push('js')
<!-- Comes from PermissionView Builder -->
{!! $permissionScripts !!}
@endpushPermissions view
Create the permission savings route
Route::post('/role/{id}/permissions/create',[RoleController::class,'permissionStore'])->name('create-role-permission');use \Illuminate\Http\Request;
class RoleController extends Controller
{
public function permissionStore(Request $request,$id)
{
$role = Role::find($id);
$role->role_permissions = json_encode($request->get('permissions')); // get the submitted permissions
$role->save();
return response()->json('success',201);
}
}Permissions could be generate for multiple panel, for example one application may have User panel and Admin panel, both may need different permissions. So we can achieve that by defining multiple panel, By default it is 'user' panel, assuming that all the permissions for user panel. But if you want different permissions for different panel you can generate that by defining another panel in the config.
Get the permission names for custom panel.
RadiateCode\PermissionNameGenerator\Permissions::make()->panel('your_custom_panel_name')->fromRoutes()->get();
Note: Panel only works for routes
Config the config/permission-generator.php file.
If route name contains any special char then split the name by that char. It will use to generate permission text. For example if route name is create.post then permission text would be Create Post
'route-name-splitter-needle' => '.',You can defined custom new permissions, add extra permissions to existing one. You can add custom-permission for custom panel.
'custom-permissions' => [
'panels' => [
'user' => [
// custom-permissions
],
// 'admin' => [
// // custom-permission
//],
]
],Example
'custom-permissions' = [
'panels' => [
'user' => [
'user-permission' => ['active-user','inactive-user'],
'bonus-permission' => [
[
'name' => 'approve-own-department',
'text' => 'Approve Own Department'
],
]
],
// 'admin' => [
// // custom-permission
//],
]
]Note: notice the
user-permissionkey which contains only permission name, if no text key pass the package dynamically make a text for the permission name. You can also add extra permissions to exisiting permission, for examplebonus-permissionis an exisitng permission, we add customapprove-own-departmentextra permission to it.
This config play vital role to generate permissions because permissions will be generated only for defined controllers. Permission names will be generate, from only defined controller's route names. By Default permission names will be generated from all controller's routes for user panel. You can define custom panel and it's permission generate controllers. Controller could be fully qualified class name or namespace-prefix.
'permission-generate-controllers' => [
'panels' => [
'user' => [
'App\Http\Controllers',
// sample
// 'App\Http\Controllers\Api',
// App\Http\Controllers\DepartmentController::class,
// App\Http\Controllers\DesignationController::class,
],
// 'admin' => [
// 'App\Http\Controllers\Admin',
//],
]
],Exclude routes by controller. By default all auth controller's routes will be excluded from being generated as permission names for user panel. Controller could be fully qualified class name or namespace-prefix.
'exclude-controllers' => [
'panels' => [
'user' => [
'App\Http\Controllers\Auth', // exclude routes of all auth controllers
// App\Http\Controller\Employee\EmployeeProfileController::class,
],
// 'admin' => [
// 'App\Http\Controllers\Admin\Auth',
//],
]
],Or, we can exclude routes by route name
'exclude-routes' => [
'panels' => [
'user' => [
// sample
'register.user',
'employee.profile',
....
....
],
// 'admin' => [
// route.name,
//],
]
],Caching the permission names
'cache-permissions' => true,Permissions can be grouped by section, example admin section, employee section, settings setion etc.
/**
* Parmissions can be organised by section (ex: adminland, settings, employee managment etc)
*
* sample format: key as section name, value as generated permissions-title
* [
* 'adminland' => [
* 'employee-permissions',
* 'bonus-permissions'
* ],
* 'settings' => [
* 'office-permissions',
* 'designation-permissions',
* 'email-settings-permissions',
* 'rules-permissions'
* ],
* ]
*/
'permissions-section' => [
'panels' => [
'user' => [
// sample
'adminland' => [
'users-permissions', // all the user permissions
'roles-permissions' // all the role permissions
],
'settings' => [
'email-settings-permissions', // all the permissions of email settings
DepartmentController::class, // all the permissions of department
DesignationController::class, // all the permissions of designation
OrganisationController::class // all the permissions of organisation
],
......,
......,
],
// 'admin' => [
//
//],
]
]Samepe Output:
The package allows you to generate permission names by defining resource names.
Example
use RadiateCode\PermissionNameGenerator\Permissions;
$permissions = Permissions::make()->fromResources([
'users',
'posts',
])->get()
// output
[
'users-permission' => [
[
'name' => 'create-users',
'text' => 'Create Users'
],
[
'name' => 'edit-users',
'text' => 'Edit Users'
],
[
'name' => 'show-users',
'text' => 'Show Users'
],
[
'name' => 'delete-users',
'text' => 'Delete Users'
],
[
'name' => 'view-users',
'text' => 'View Users'
],
],
'posts-permission' => [
[
'name' => 'create-posts',
'text' => 'Create Posts'
],
[
'name' => 'edit-posts',
'text' => 'Edit Posts'
],
[
'name' => 'show-posts',
'text' => 'Show Posts'
],
[
'name' => 'delete-posts',
'text' => 'Delete Posts'
],
[
'name' => 'view-posts',
'text' => 'View Posts'
],
]
]Wonder how it generate, the resource permission names generate using actions, which defined in the
configfile/** * These actions used to generate permissions on given resources * * [Ex: If resource is posts, then permission will be ('create-posts','edit-posts','view-posts') etc] */ 'resource-actions' => [ 'create', 'edit', 'show', 'delete', 'view', ]
we can also add resource wise extra actions, which will generate extra permission names.
use RadiateCode\PermissionNameGenerator\Permissions;
$permissions = Permissions::make()->fromResources([
'users' => /*extra actions*/['delete-selected','active'],
'posts' // no extra actions
])->get();
// output
[
'users-permission' => [
[
'name' => 'create-users',
'text' => 'Create Users'
],
[
'name' => 'edit-users',
'text' => 'Edit Users'
],
[
'name' => 'show-users',
'text' => 'Show Users'
],
[
'name' => 'delete-users',
'text' => 'Delete Users'
],
[
'name' => 'view-users',
'text' => 'View Users'
],
[ // extra
'name' => 'delete-selected-users',
'text' => 'Delete Selected Users'
],
[ // extra
'name' => 'active-users',
'text' => 'Active Users'
],
],
'posts-permission' => [
[
'name' => 'create-posts',
'text' => 'Create Posts'
],
[
'name' => 'edit-posts',
'text' => 'Edit Posts'
],
[
'name' => 'show-posts',
'text' => 'Show Posts'
],
[
'name' => 'delete-posts',
'text' => 'Delete Posts'
],
[
'name' => 'view-posts',
'text' => 'View Posts'
],
],
]Example
use RadiateCode\PermissionNameGenerator\Permissions;
use RadiateCode\PermissionNameGenerator\Facades\PermissionsView;
use App\Models\Role;
class RoleController extends Controller
{
public function permissionsShow($id)
{
$role = Role::query()->findOrFail($id);
$permissions = Permissions::make()->fromResources([
'users',
'posts',
'comments'
])->get();
return PermissionsView::make('app.role.permissions')
->withPermissions($permissions)
->markRolePermissions(
$role->role_name,
json_decode($role->role_permissions), // assume role permissions stored as json encoded
route('create-role-permission', $role->id) // permission save url for a role
)->render();
}
}Please see CONTRIBUTING for details.
If you discover any security related issues, please email radiate126@gmail.com instead of using the issue tracker.
The MIT License (MIT). Please see License File for more information.