2017 © Pedro Peláez
 

library authority-laravel

A simple and flexible authorization system for PHP

image

authority-php/authority-laravel

A simple and flexible authorization system for PHP

  • Saturday, January 28, 2017
  • by machuga
  • Repository
  • 3 Watchers
  • 6 Stars
  • 9,239 Installations
  • PHP
  • 1 Dependents
  • 0 Suggesters
  • 42 Forks
  • 0 Open issues
  • 10 Versions
  • 3 % Grown

The README.md

Authority-Laravel

A simple and flexible authorization system for Laravel 5

Installation via Composer

Add Authority to your composer.json file to require Authority, (*1)

require : {
  "laravel/framework": "~5.0.16",
  "authority-php/authority-laravel": "dev-master"
}

Now update Composer, (*2)

composer update, (*3)

The last required step is to add the service provider to config/app.php, (*4)

    'Authority\AuthorityLaravel\AuthorityLaravelServiceProvider',

Congratulations, you have successfully installed Authority. However, we have also included some other configuration options for your convenience., (*5)

For Laravel 4 supports, see Authority-Laravel 2.3 branch, (*6)

Additional (optional) Configuration Options

Add the alias (facade) to your Laravel app config file.
    'Authority' => 'Authority\AuthorityLaravel\Facades\Authority',

This will allow you to access the Authority class through the static interface you are used to with Laravel components., (*7)

  Authority::can('update', 'SomeModel');
Publish the Authority default configuration file
  php artisan vendor:publish

This will place a copy of the configuration file at config/authority.php. The config file includes an 'initialize' function, which is a great place to setup your rules and aliases., (*8)

  // config/authority.php
    <?php

  return array(

    'initialize' => function($authority) {
      $user = $authority->getCurrentUser();

      // action aliases
      $authority->addAlias('manage', array('create', 'read', 'update', 'delete'));
          $authority->addAlias('moderate', array('read', 'update', 'delete'));

          // an example using the `hasRole` function, see below examples for more details
          if ($user->hasRole('admin')){
            $authority->allow('manage', 'all');
      }
    }

  );
Create Roles and Permissions Tables

We have provided a basic table structure to get you started in creating your roles and permissions., (*9)

Publish them to your migrations directory or copy them directly., (*10)

  php artisan vendor:publish

Run the migrations, (*11)

  php artisan migrate

This will create the following tables, (*12)

  • roles
  • role_user
  • permissions

To utilize these tables, you can add the following methods to your User model. You will also need to create Role and Permission Model stubs., (*13)

  // app/User.php

  public function roles() {
        return $this->belongsToMany('App\Authority\Role');
    }

    public function permissions() {
        return $this->hasMany('App\Authority\Permission');
    }

  public function hasRole($key) {
    foreach ($this->roles as $role) {
      if ($role->name === $key) {
        return true;
      }
    }

    return false;
  }

  // app/Authority/Role.php
    <?php

    use Illuminate\Database\Eloquent\Model;

  class Role extends Model {}

  // app/Authority/Permission.php
    <?php

    use Illuminate\Database\Eloquent\Model;

  class Permission extends Model {}

Lastly, in your Authority config file which you copied over in the previous configuration step. You can add some rules:, (*14)

  // config/authority.php
    <?php

  return array(

    'initialize' => function($authority) {

      $user = $authority->getCurrentUser();

      // action aliases
      $authority->addAlias('manage', array('create', 'read', 'update', 'delete'));
          $authority->addAlias('moderate', array('read', 'update', 'delete'));

          // an example using the `hasRole` function, see below examples for more details
          if ($user->hasRole('admin')) {
            $authority->allow('manage', 'all');
      }

      // loop through each of the users permissions, and create rules
      foreach ($user->permissions as $perm) {
        if ($perm->type == 'allow') {
          $authority->allow($perm->action, $perm->resource);
        } else {
          $authority->deny($perm->action, $perm->resource);
        }
      }
    }

  );

General Usage

  // If you added the alias to `config/app.php` then you can access Authority, from any Controller, View, or anywhere else in your Laravel app like so:
  if (Authority::can('create', 'User')) {
    User::create(array(
      'username' => 'someuser@test.com'
    ));
  }

  // If you just chose to use the service provider, you can use the IoC container to resolve your instance
  $authority = App::make('authority');

Interface

There are 5 basic functions that you need to be aware of to utilize Authority., (*15)

  • allow: create a rule that will allow access a resource, (*16)

    example 1:, (*17)

      Authority::allow('read', 'User');

    example 2, using an extra condition:, (*18)

      Authority::allow('manage', 'User', function($self, $user){
    return $self->getCurrentUser()->id === $user->id;
  });

  • deny: create a rule that will deny access a resource, (*19)

    example 1:, (*20)

      Authority::deny('create', 'User');

    example 2, using an extra condition:, (*21)

      Authority::deny('delete', 'User', function ($self, $user) {
        return $self->getCurrentUser()->id === $user->id;
    });

  • can: check if a user can access a resource, (*22)

    example:, (*23)

      Authority::can('read', 'User', $user);

  • cannot: check if a use cannot access a resource, (*24)

    example:, (*25)

      Authority::cannot('create', 'User');

  • addAlias: alias together a group of actions, (*26)

    this example aliases together the CRUD methods under a name of manage, (*27)

      Authority::alias('manage', array('create', 'read', 'update', 'delete'));

Converting to this library, where you previously had been using the IoC container to resolve an instance.

The service provider will merely create a new instance of Authority, and pass in the currently logged in user to the constructor. This should be basically the same process that you were doing in your IoC registry. This means that any code you have used in the past should still work just fine! However it is recommended that you move your rule definitions into the provided configuration file., (*28)

The Versions

28/01 2017

dev-master

9999999-dev https://github.com/authority-php/authority-laravel

A simple and flexible authorization system for PHP

  Sources   Download

MIT

The Requires

 

by Matthew Machuga
by Koen Schmeets
by Tortue Torche
by Conar Welsh

laravel authentication authorization laravel 5

28/01 2017

2.4.5

2.4.5.0 https://github.com/authority-php/authority-laravel

A simple and flexible authorization system for PHP

  Sources   Download

MIT

The Requires

 

by Matthew Machuga
by Koen Schmeets
by Tortue Torche
by Conar Welsh

laravel authentication authorization laravel 5

28/01 2017

2.4.4

2.4.4.0 https://github.com/authority-php/authority-laravel

A simple and flexible authorization system for PHP

  Sources   Download

MIT

The Requires

 

by Matthew Machuga
by Koen Schmeets
by Tortue Torche
by Conar Welsh

laravel authentication authorization laravel 5

19/05 2015

2.3.x-dev

2.3.9999999.9999999-dev https://github.com/authority-php/authority-laravel

A simple and flexible authorization system for PHP

  Sources   Download

MIT

The Requires

 

The Development Requires

by Matthew Machuga
by Koen Schmeets
by Conar Welsh

laravel authentication authorization laravel 4

19/05 2015

2.3.0

2.3.0.0 https://github.com/authority-php/authority-laravel

A simple and flexible authorization system for PHP

  Sources   Download

MIT

The Requires

 

The Development Requires

by Matthew Machuga
by Koen Schmeets
by Conar Welsh

laravel authentication authorization laravel 4

16/05 2015

2.4.3

2.4.3.0 https://github.com/authority-php/authority-laravel

A simple and flexible authorization system for PHP

  Sources   Download

MIT

The Requires

 

by Matthew Machuga
by Koen Schmeets
by Tortue Torche
by Conar Welsh

laravel authentication authorization laravel 5

13/03 2014

2.2.0

2.2.0.0 https://github.com/machuga/authority-l4

A simple and flexible authorization system for PHP

  Sources   Download

The Requires

 

The Development Requires

by Matthew Machuga
by Koen Schmeets
by Conar Welsh

laravel authentication authorization laravel 4

21/01 2014

2.1.0

2.1.0.0 https://github.com/machuga/authority-l4

A simple and flexible authorization system for PHP

  Sources   Download

The Requires

 

The Development Requires

by Matthew Machuga
by Koen Schmeets
by Conar Welsh

laravel authentication authorization laravel 4

13/08 2013

2.0.0

2.0.0.0 https://github.com/machuga/authority-l4

A simple and flexible authorization system for PHP

  Sources   Download

The Requires

 

The Development Requires

by Matthew Machuga
by Koen Schmeets
by Conar Welsh

laravel authentication authorization laravel 4

11/04 2013

dev-develop

dev-develop https://github.com/machuga/authority-l4

A simple and flexible authorization system for PHP

  Sources   Download

The Requires

 

The Development Requires

by Matthew Machuga
by Koen Schmeets
by Conar Welsh

laravel authentication authorization laravel 4