Laravel 5.4 User Role and Permissions (ACL) with Spatie Laravel-Permission Middlware

Leave a Comment / php / By

Laravel 5.4 User Role and Permissions (ACL) with Spatie Laravel-Permission Middlware

In this post we will give you information about Laravel 5.4 User Role and Permissions (ACL) with Spatie Laravel-Permission Middlware. Hear we will give you detail about Laravel 5.4 User Role and Permissions (ACL) with Spatie Laravel-Permission MiddlwareAnd how to use it also give you demo for it if it is necessary.

In this Laravel tutorial, I will tell you how to implement role and permission (ACL) to a user in the Laravel application.

For example, A user may have permission to change anything but other user may have permission to read only within the application.

In this example, I will create a simple blog application with role and permission that means you can give access to user to edit post, create post, delete post etc.

I will define role and permission on database level that will manage by a UI in the admin panel.

There are so many package built in Laravel to implement role and permission but for this example I am going to use spatie/laravel-permission package.

By the end of this tutorial, you will be able to define rights for authenticated users using role and permissions.


Install Laravel 5.5 and Configure the permission package

First, We will install fresh Laravel application by running following composer command :

composer create-project --prefer-dist laravel/laravel blog

After successfully installation, create the database and update database credential in .env file.

DB_CONNECTION=mysql
DB_HOST=127.0.0.1
DB_PORT=3306
DB_DATABASE=blog
DB_USERNAME=root
DB_PASSWORD=

Now install the Laravel permission package :

composer require spatie/laravel-permission

Now add the provider in the list of service provider, Open config/app.php file and add SpatiePermissionPermissionServiceProvider::class.

'providers' => [
    ...
    SpatiePermissionPermissionServiceProvider::class,
];

Now run the artisan command to publish migration file :

php artisan vendor:publish --provider="SpatiePermissionPermissionServiceProvider" --tag="migrations"

To create table from migration file, run following artisan command :

php artisan migrate

If you are running lower version of MySQL then you may get following error :

[IlluminateDatabaseQueryException]
SQLSTATE[42000]: Syntax error or access violation: 1071 Specified key was too long; max key length is 767 bytes (SQL: alter table users add unique users_email_unique(email))

[PDOException]
SQLSTATE[42000]: Syntax error or access violation: 1071 Specified key was too long; max key length is 767 bytes

To avoid this error, edit the appProvidersAppServiceProvider.php file :

use IlluminateSupportFacadesSchema;

public function boot()
{
    Schema::defaultStringLength(191);
}

Now you can run migrate command again to create table into database.


Laravel Collective HTML Form builder

Now install the Laravel Collective HTML Form builder to avoid the error “Class Form not found”.

And then add provider to providers array

'providers' => [
    ...
    CollectiveHtmlHtmlServiceProvider::class,
];

Next add the aliases to aliases array :

'aliases' => [
      ...
     'Form' => CollectiveHtmlFormFacade::class,
     'Html' => CollectiveHtmlHtmlFacade::class,
],

With the fresh installation of Laravel, You will have User model by default.

Now I need to create Role, Permission and Post models with their resource controller.

SpatiePermission already have role and permissions model, you just need to publish them but I will create manually Model and Controller class by running following command :

// Create Role model and resource controller
php artisan make:model Role -c --resource

// Create Permission model and resource controller
php artisan make:model Permission -c --resource

// Create Post model with migration and resource controller
php artisan make:model Post -m -c --resource

By default Role and Permission class will extend default Model class :

  1. class Role extends Model {}
class Role extends Model { }

You need to edit Role and Permission class to extend SpatiePermissionModels.

  1. // Permission Model
  2. class Permission extendsSpatiePermissionModelsPermission {}
  4. // Role Model
  5. class Role extendsSpatiePermissionModelsRole {}
// Permission Model
class Permission extends SpatiePermissionModelsPermission { }

// Role Model
class Role extends SpatiePermissionModelsRole { }

When you run php artisan make:model Post -m -c --resource command then you will have migration file to create post table, So edit you migration file :


2017_09_02_052113_create_posts_table.php

  1. Schema::create('posts',function(Blueprint $table){
  2. $table->increments('id');
  3. $table->string('title');
  4. $table->text('body');
  5. $table->timestamps();
  6. });
Schema::create('posts', function (Blueprint $table) {
    $table->increments('id');
    $table->string('title');
    $table->text('body');
    $table->timestamps();
});

Run migrate command to create post table again.

Next we need to add HasRoles trait to User model.

  1. use SpatiePermissionTraitsHasRoles;
  3. class User extends Authenticatable {
  4. use HasRoles;
  6. ...
  7. }
use SpatiePermissionTraitsHasRoles;

class User extends Authenticatable {
    use HasRoles;

     ...
}


Default Permission

Next we will add some default permission in Permission Model :

  1. <?php
  3. namespace App;
  5. use IlluminateDatabaseEloquentModel;
  7. class Permission extendsSpatiePermissionModelsPermission
  8. {
  9.     public staticfunctiondefaultPermissions()
  10.     {
  11.         return[           
  12.             'viewPost',
  13.             'addPost',
  14.             'editPost',
  15.             'deletePost',
  16.         ];
  17.     }
  18. }
<?php

namespace App;

use IlluminateDatabaseEloquentModel;

class Permission extends SpatiePermissionModelsPermission
{
    public static function defaultPermissions()
	{
	    return [	       
	        'viewPost',
	        'addPost',
	        'editPost',
	        'deletePost',
	    ];
	}
}

Now we will use Database seeder to seed data for testing our app.


database/seeds/DatabaseSeeder.php

  1. <?php
  3. use IlluminateDatabaseSeeder;
  4. use AppPermission;
  5. use AppRole;
  6. use AppUser;
  7. use AppPost;
  9. class DatabaseSeeder extends Seeder
  10. {
  11. /**
  12.      * Run the database seeds.
  13.      *
  14.      * @return void
  15.      */
  16.   public functionrun()
  17. {
  18. // Ask for confirmation to refresh migration
  19. if($this->command->confirm('Do you wish to refresh migration before seeding, Make sure it will clear all old data ?')){
  20. $this->command->call('migrate:refresh');
  21. $this->command->warn("Data deleted, starting from fresh database.");
  22. }
  24. // Seed the default permissions
  25. $permissions= Permission::defaultPermissions();
  27. foreach($permissionsas$permission){
  28.             Permission::firstOrCreate(['name'=>$permission]);
  29. }
  31. $this->command->info('Default Permissions added.');
  33. // Ask to confirm to assign admin or user role
  34. if($this->command->confirm('Create Roles for user, default is admin and user? [y|N]', true)){
  36. // Ask for roles from input
  37. $roles=$this->command->ask('Enter roles in comma separate format.','Admin,User');
  39. // Explode roles
  40. $rolesArray=explode(',',$roles);
  42. // add roles
  43. foreach($rolesArrayas$role){
  44. $role= Role::firstOrCreate(['name'=>trim($role)]);
  46. if($role->name =='Admin'){
  47. // assign all permissions to admin role
  48. $role->permissions()->sync(Permission::all());
  49. $this->command->info('Admin will have full rights');
  50. }else{
  51. // for others, give access to view only
  52. $role->permissions()->sync(Permission::where('name','LIKE','view_%')->get());
  53. }
  55. // create one user for each role
  56. $this->createUser($role);
  57. }
  59. $this->command->info('Roles '.$roles.' added successfully');
  61. }else{
  62.             Role::firstOrCreate(['name'=>'User']);
  63. $this->command->info('By default, User role added.');
  64. }
  67. }
  69. /**
  70.      * Create a user with given role
  71.      *
  72.      * @param $role
  73.      */
  74.     private functioncreateUser($role)
  75. {
  76. $user=factory(User::class)->create();
  77. $user->assignRole($role->name);
  79. if($role->name =='Admin'){
  80. $this->command->info('Admin login details:');
  81. $this->command->warn('Username : '.$user->email);
  82. $this->command->warn('Password : "secret"');
  83. }
  84. }
  88. }
<?php

use IlluminateDatabaseSeeder;
use AppPermission;
use AppRole;
use AppUser;
use AppPost;

class DatabaseSeeder extends Seeder
{
    /**
     * Run the database seeds.
     *
     * @return void
     */
  public function run()
    {
        // Ask for confirmation to refresh migration
        if ($this->command->confirm('Do you wish to refresh migration before seeding, Make sure it will clear all old data ?')) {
            $this->command->call('migrate:refresh');
            $this->command->warn("Data deleted, starting from fresh database.");
        }

        // Seed the default permissions
        $permissions = Permission::defaultPermissions();

        foreach ($permissions as $permission) {
            Permission::firstOrCreate(['name' => $permission]);
        }

        $this->command->info('Default Permissions added.');

        // Ask to confirm to assign admin or user role
        if ($this->command->confirm('Create Roles for user, default is admin and user? [y|N]', true)) {

            // Ask for roles from input
            $roles = $this->command->ask('Enter roles in comma separate format.', 'Admin,User');

            // Explode roles
            $rolesArray = explode(',', $roles);

            // add roles
            foreach($rolesArray as $role) {
                $role = Role::firstOrCreate(['name' => trim($role)]);

                if( $role->name == 'Admin' ) {
                    // assign all permissions to admin role
                    $role->permissions()->sync(Permission::all());
                    $this->command->info('Admin will have full rights');
                } else {
                    // for others, give access to view only
                    $role->permissions()->sync(Permission::where('name', 'LIKE', 'view_%')->get());
                }

                // create one user for each role
                $this->createUser($role);
            }

            $this->command->info('Roles ' . $roles . ' added successfully');

        } else {
            Role::firstOrCreate(['name' => 'User']);
            $this->command->info('By default, User role added.');
        }

      
    }

    /**
     * Create a user with given role
     *
     * @param $role
     */
    private function createUser($role)
    {
        $user = factory(User::class)->create();
        $user->assignRole($role->name);

        if( $role->name == 'Admin' ) {
            $this->command->info('Admin login details:');
            $this->command->warn('Username : '.$user->email);
            $this->command->warn('Password : "secret"');
        }
    }

    

}

Next run the seeder using following command :

php artisan db:seed

Ok, Everything is setup now.

Next we will perform simple CRUD operation on “Role”, “Permission”, “User” and “Post” module.


Register routes

Now add following routes in your routes/web.php :

Route::group( ['middleware' => ['auth']], function() {
    Route::resource('users', 'UserController');
    Route::resource('roles', 'RoleController');
    Route::resource('posts', 'PostController');
	Route::resource('permissions','PermissionController');
});



Master Layout ‘resources/views/layouts/app.blade.php’ 

  1. <!DOCTYPEhtml>
  2. <htmllang="{{ app()->getLocale() }}">
  3. <head>
  4. <metacharset="utf-8">
  5. <metahttp-equiv="X-UA-Compatible"content="IE=edge">
  6. <metaname="viewport"content="width=device-width, initial-scale=1">
  8. <!-- CSRF Token -->
  9. <metaname="csrf-token"content="{{ csrf_token() }}">
  11. <title>{{ config('app.name', 'Laravel') }}</title>
  13. <!-- Styles -->
  14. <linkhref="{{ asset('css/app.css') }}"rel="stylesheet">
  15. </head>
  16. <body>
  17. <divid="app">
  18. <navclass="navbar navbar-default navbar-static-top">
  19. <divclass="container">
  20. <divclass="navbar-header">
  22. <!-- Collapsed Hamburger -->
  23. <buttontype="button"class="navbar-toggle collapsed"data-toggle="collapse"data-target="#app-navbar-collapse">
  24. <spanclass="sr-only">Toggle Navigation</span>
  25. <spanclass="icon-bar"></span>
  26. <spanclass="icon-bar"></span>
  27. <spanclass="icon-bar"></span>
  28. </button>
  30. <!-- Branding Image -->
  31. <aclass="navbar-brand"href="{{ url('/') }}">
  32.                         {{ config('app.name', 'Laravel') }}
  33. </a>
  34. </div>
  36. <divclass="collapse navbar-collapse"id="app-navbar-collapse">
  37. <!-- Left Side Of Navbar -->
  38. <ulclass="nav navbar-nav">
  39. &nbsp;
  40. </ul>
  42. <!-- Right Side Of Navbar -->
  43. <ulclass="nav navbar-nav navbar-right">
  44. <!-- Authentication Links -->
  45.                         @if (Auth::guest())
  46. <li><ahref="{{ route('login') }}">Login</a></li>
  47. <li><ahref="{{ route('register') }}">Register</a></li>
  48.                         @else
  49. <liclass="dropdown">
  50. <ahref="#"class="dropdown-toggle"data-toggle="dropdown"role="button"aria-expanded="false">
  51.                                     {{ Auth::user()->name }} <spanclass="caret"></span>
  52. </a>
  54. <ulclass="dropdown-menu"role="menu">
  55. <li>
  56. <ahref="{{ route('logout') }}"
  57. onclick="event.preventDefault();
  58.                                                      document.getElementById('logout-form').submit();">
  59.                                             Logout
  60. </a>
  62. <formid="logout-form"action="{{ route('logout') }}"method="POST"style="display: none;">
  63.                                             {{ csrf_field() }}
  64. </form>
  65. </li>
  66. </ul>
  67. </li>
  68.                         @endif
  69. </ul>
  70. </div>
  71. </div>
  72. </nav>
  73.         @if ($message = Session::get('success'))
  74. <divclass="alert alert-success">
  75. <p>{{ $message }}</p>
  76. </div>
  77.         @endif
  78.         @yield('content')
  79. </div>
  81. <!-- Scripts -->
  82. <scriptsrc="{{ asset('js/app.js') }}"></script>
  83. </body>
  84. </html>
<!DOCTYPE html>
<html lang="{{ app()->getLocale() }}">
<head>
    <meta charset="utf-8">
    <meta http-equiv="X-UA-Compatible" content="IE=edge">
    <meta name="viewport" content="width=device-width, initial-scale=1">

    <!-- CSRF Token -->
    <meta name="csrf-token" content="{{ csrf_token() }}">

    <title>{{ config('app.name', 'Laravel') }}</title>

    <!-- Styles -->
    <link href="{{ asset('css/app.css') }}" rel="stylesheet">
</head>
<body>
    <div id="app">
        <nav >
            <div >
                <div >

                    <!-- Collapsed Hamburger -->
                    <button type="button"  data-toggle="collapse" data-target="#app-navbar-collapse">
                        <span >Toggle Navigation</span>
                        <span ></span>
                        <span ></span>
                        <span ></span>
                    </button>

                    <!-- Branding Image -->
                    <a  href="{{ url('/') }}">
                        {{ config('app.name', 'Laravel') }}
                    </a>
                </div>

                <div  id="app-navbar-collapse">
                    <!-- Left Side Of Navbar -->
                    <ul >
                        &nbsp;
                    </ul>

                    <!-- Right Side Of Navbar -->
                    <ul >
                        <!-- Authentication Links -->
                        @if (Auth::guest())
                            <li><a href="{{ route('login') }}">Login</a></li>
                            <li><a href="{{ route('register') }}">Register</a></li>
                        @else
                            <li >
                                <a href="#"  data-toggle="dropdown" role="button" aria-expanded="false">
                                    {{ Auth::user()->name }} <span ></span>
                                </a>

                                <ul  role="menu">
                                    <li>
                                        <a href="{{ route('logout') }}"
                                            onclick="event.preventDefault();
                                                     document.getElementById('logout-form').submit();">
                                            Logout
                                        </a>

                                        <form id="logout-form" action="{{ route('logout') }}" method="POST" style="display: none;">
                                            {{ csrf_field() }}
                                        </form>
                                    </li>
                                </ul>
                            </li>
                        @endif
                    </ul>
                </div>
            </div>
        </nav>
        @if ($message = Session::get('success'))
            <div >
                <p>{{ $message }}</p>
            </div>
        @endif
        @yield('content')
    </div>

    <!-- Scripts -->
    <script src="{{ asset('js/app.js') }}"></script>
</body>
</html>


User Management Module

Now add following code in UserController.php :

  1. <?php
  3. namespace AppHttpControllers;
  5. use IlluminateHttpRequest;
  6. use AppUser;
  7. use AppRole;
  8. use AppPermission;
  10. class UserController extends Controller
  11. {
  12. /**
  13.      * Create a new controller instance.
  14.      *
  15.      * @return void
  16.      */
  17.     public function__construct()
  18. {
  19. $this->middleware('auth');
  20. }
  22. /**
  23.      * Show the application dashboard.
  24.      *
  25.      * @return IlluminateHttpResponse
  26.      */
  27.     public functionindex()
  28. {
  29. $users= User::latest()->paginate();
  30. returnview('users.index',compact('users'));
  31. }
  32.     public functioncreate()
  33. {
  34. $roles= Role::get();
  35. returnview('users.create',compact('roles'));
  36. }
  38.     public functionstore(Request $request)
  39. {
  40. $this->validate($request,[
  41. 'name'=>'required',
  42. 'email'=>'required|email|unique:users',
  43. 'password'=>'required|min:6|confirmed',
  44. 'roles'=>'required'
  45. ]);
  47. $user= User::create($request->except('roles'));
  49. if($request->roles <>''){
  50. $user->roles()->attach($request->roles);
  51. }
  52. returnredirect()->route('users.index')->with('success','User has been created');
  54. }
  56.     public functionedit($id){
  57. $user= User::findOrFail($id);
  58. $roles= Role::get();
  59. returnview('users.edit',compact('user','roles'));
  60. }
  62.     public functionupdate(Request $request,$id){
  63. $user= User::findOrFail($id);
  64. $this->validate($request,[
  65. 'name'=>'required|max:120',
  66. 'email'=>'required|email|unique:users,email,'.$id,
  67. 'password'=>'required|min:6|confirmed'
  68. ]);
  69. $input=$request->except('roles');
  70. $user->fill($input)->save();
  72. if($request->roles <>''){
  73. $user->roles()->sync($request->roles);
  74. }
  75. else{
  76. $user->roles()->detach();
  77. }
  78. returnredirect()->route('users.index')->with('success',
  79. 'User successfully updated.');
  80. }
  82.     public functiondestroy($id){
  83. $user= User::findOrFail($id);
  84. $user->delete();
  85. returnredirect()->route('users.index')->with('success',
  86. 'User successfully deleted.');
  87. }
  88. }
<?php

namespace AppHttpControllers;

use IlluminateHttpRequest;
use AppUser;
use AppRole;
use AppPermission;

class UserController extends Controller
{
    /**
     * Create a new controller instance.
     *
     * @return void
     */
    public function __construct()
    {
        $this->middleware('auth');
    }

    /**
     * Show the application dashboard.
     *
     * @return IlluminateHttpResponse
     */
    public function index()
    {
        $users = User::latest()->paginate();
        return view('users.index', compact('users'));
    }
    public function create()
    {
        $roles = Role::get();        
        return view('users.create', compact('roles'));
    }

    public function store(Request $request)
    {
        $this->validate($request, [
            'name' => 'required',
            'email' => 'required|email|unique:users',
            'password' => 'required|min:6|confirmed',
            'roles' => 'required'
        ]);

        $user = User::create($request->except('roles'));
        
        if($request->roles <> ''){
            $user->roles()->attach($request->roles);
        }
        return redirect()->route('users.index')->with('success','User has been created');            
        
    }

    public function edit($id) {
        $user = User::findOrFail($id);
        $roles = Role::get(); 
        return view('users.edit', compact('user', 'roles')); 
    }

    public function update(Request $request, $id) {
        $user = User::findOrFail($id);   
        $this->validate($request, [
            'name'=>'required|max:120',
            'email'=>'required|email|unique:users,email,'.$id,
            'password'=>'required|min:6|confirmed'
        ]);
        $input = $request->except('roles');
        $user->fill($input)->save();

        if ($request->roles <> '') {
            $user->roles()->sync($request->roles);        
        }        
        else {
            $user->roles()->detach(); 
        }
        return redirect()->route('users.index')->with('success',
             'User successfully updated.');
    }

    public function destroy($id) {
        $user = User::findOrFail($id); 
        $user->delete();
        return redirect()->route('users.index')->with('success',
             'User successfully deleted.');
    }
}

In store() method, A new user is registered with selected roles.

In update() method, I will update the user details and update roles with sync method.

Use mutator in appUser.php file that will encrypt password while registering new user.


appUser.php 

  1. public functionsetPasswordAttribute($password)
  2. {
  3. $this->attributes['password']=bcrypt($password);
  4. }
public function setPasswordAttribute($password)
{   
    $this->attributes['password'] = bcrypt($password);
}



User Views

There are three views required :


index.blade.php

This file will contain a HTML Table with list of all users.

  1. {{-- resourcesviewsusersindex.blade.php --}}
  2. @extends('layouts.app')
  3. @section('title', '| Users')
  4. @section('content')
  6. <divclass="col-lg-10 col-lg-offset-1">
  7. <h1><iclass="fa fa-users"></i> User Management 
  8. <ahref="{{ route('roles.index') }}"class="btn btn-default pull-right">Roles</a>
  9. <ahref="{{ route('permissions.index') }}"class="btn btn-default pull-right">Permissions</a>
  10. <ahref="{{ route('users.create') }}"class="btn btn-success">Add User</a>
  11. </h1>
  12. <hr>
  13. <divclass="table-responsive">
  14. <tableclass="table table-bordered table-striped">
  16. <thead>
  17. <tr>
  18. <th>Name</th>
  19. <th>Email</th>
  20. <th>Date/Time Added</th>
  21. <th>User Roles</th>
  22. <th>Action</th>
  23. </tr>
  24. </thead>
  26. <tbody>
  27.                 @foreach ($users as $user)
  28. <tr>
  29. <td>{{ $user->name }}</td>
  30. <td>{{ $user->email }}</td>
  31. <td>{{ $user->created_at->format('F d, Y h:ia') }}</td>
  32. <td>{{ $user->roles()->pluck('name')->implode(' ') }}</td>
  33. <td>
  34. <ahref="{{ route('users.edit', $user->id) }}"class="btn btn-warning">Edit</a>
  35.                     {!! Form::open(['method' => 'DELETE', 'route' => ['users.destroy', $user->id] ]) !!}
  36.                     {!! Form::submit('Delete', ['class' => 'btn btn-danger']) !!}
  37.                     {!! Form::close() !!}
  38. </td>
  39. </tr>
  40.                 @endforeach
  41. </tbody>
  42. </table>
  43. </div>
  44. </div>
  46. @endsection
{{-- resourcesviewsusersindex.blade.php --}}
@extends('layouts.app')
@section('title', '| Users')
@section('content')

<div >
    <h1><i ></i> User Management 
    <a href="{{ route('roles.index') }}" >Roles</a>
    <a href="{{ route('permissions.index') }}" >Permissions</a>
    <a href="{{ route('users.create') }}" >Add User</a>
    </h1>
    <hr>
    <div >
        <table >

            <thead>
                <tr>
                    <th>Name</th>
                    <th>Email</th>
                    <th>Date/Time Added</th>
                    <th>User Roles</th>
                    <th>Action</th>
                </tr>
            </thead>

            <tbody>
                @foreach ($users as $user)
                <tr>
                    <td>{{ $user->name }}</td>
                    <td>{{ $user->email }}</td>
                    <td>{{ $user->created_at->format('F d, Y h:ia') }}</td>
                    <td>{{ $user->roles()->pluck('name')->implode(' ') }}</td>
                    <td>
                    <a href="{{ route('users.edit', $user->id) }}" >Edit</a>
                    {!! Form::open(['method' => 'DELETE', 'route' => ['users.destroy', $user->id] ]) !!}
                    {!! Form::submit('Delete', ['class' => 'btn btn-danger']) !!}
                    {!! Form::close() !!}
                    </td>
                </tr>
                @endforeach
            </tbody>
        </table>
    </div>
</div>

@endsection


create.blade.php

  1. {{-- resourcesviewsuserscreate.blade.php --}}
  2. @extends('layouts.app')
  4. @section('title', '| Create User')
  6. @section('content')
  8. <divclass='col-lg-4col-lg-offset-4'>
  10. <h1><iclass='fafa-user-plus'></i> Create User</h1>
  11. <hr>
  13.     {!! Form::open(array('url' => 'users')) !!}
  14. <divclass="form-group @if ($errors->has('name')) has-error @endif">
  15.         {!! Form::label('name', 'Name') !!}
  16.         {!! Form::text('name', '', array('class' => 'form-control')) !!}
  17. </div>
  18. <divclass="form-group @if ($errors->has('email')) has-error @endif">
  19.         {!! Form::label('email', 'Email') !!}
  20.         {!! Form::email('email', '', array('class' => 'form-control')) !!}
  21. </div>
  22. <divclass="form-group @if ($errors->has('roles')) has-error @endif">
  23.         @foreach ($roles as $role)
  24.             {!! Form::checkbox('roles[]',  $role->id ) !!}
  25.             {!! Form::label($role->name, ucfirst($role->name)) !!}<br>
  26.         @endforeach
  27. </div>
  28. <divclass="form-group @if ($errors->has('password')) has-error @endif">
  29.         {!! Form::label('password', 'Password') !!}<br>
  30.         {!! Form::password('password', array('class' => 'form-control')) !!}
  31. </div>
  32. <divclass="form-group @if ($errors->has('password')) has-error @endif">
  33.         {!! Form::label('password', 'Confirm Password') !!}<br>
  34.         {!! Form::password('password_confirmation', array('class' => 'form-control')) !!}
  35. </div>
  36.     {!! Form::submit('Register', array('class' => 'btn btn-primary')) !!}
  37.     {!! Form::close() !!}
  38. </div>
  40. @endsection
{{-- resourcesviewsuserscreate.blade.php --}}
@extends('layouts.app')

@section('title', '| Create User')

@section('content')

<div class='col-lg-4 col-lg-offset-4'>

    <h1><i class='fa fa-user-plus'></i> Create User</h1>
    <hr>

    {!! Form::open(array('url' => 'users')) !!}
    <div >
        {!! Form::label('name', 'Name') !!}
        {!! Form::text('name', '', array('class' => 'form-control')) !!}
    </div>
    <div >
        {!! Form::label('email', 'Email') !!}
        {!! Form::email('email', '', array('class' => 'form-control')) !!}
    </div>
    <div >
        @foreach ($roles as $role)
            {!! Form::checkbox('roles[]',  $role->id ) !!}
            {!! Form::label($role->name, ucfirst($role->name)) !!}<br>
        @endforeach
    </div>
    <div >
        {!! Form::label('password', 'Password') !!}<br>
        {!! Form::password('password', array('class' => 'form-control')) !!}
    </div>
    <div >
        {!! Form::label('password', 'Confirm Password') !!}<br>
        {!! Form::password('password_confirmation', array('class' => 'form-control')) !!}
    </div>
    {!! Form::submit('Register', array('class' => 'btn btn-primary')) !!}
    {!! Form::close() !!}
</div>

@endsection


edit.blade.php 

  1. {{-- resourcesviewsusersedit.blade.php --}}
  3. @extends('layouts.app')
  5. @section('title', '| Update User')
  7. @section('content')
  9. <divclass='col-lg-4col-lg-offset-4'>
  11. <h1><iclass='fafa-user-plus'></i> Update {{$user->name}}</h1>
  12. <hr>
  14.     {{ Form::model($user, array('route' => array('users.update', $user->id), 'method' => 'PUT')) }}
  16. <divclass="form-group @if ($errors->has('name')) has-error @endif">
  17.         {{ Form::label('name', 'Name') }}
  18.         {{ Form::text('name', null, array('class' => 'form-control')) }}
  19. </div>
  20. <divclass="form-group @if ($errors->has('email')) has-error @endif">
  21.         {{ Form::label('email', 'Email') }}
  22.         {{ Form::email('email', null, array('class' => 'form-control')) }}
  23. </div>
  24. <h5><b>Assign Role</b></h5>
  25. <divclass="form-group @if ($errors->has('roles')) has-error @endif">
  26.         @foreach ($roles as $role)
  27.             {{ Form::checkbox('roles[]',  $role->id, $user->roles ) }}
  28.             {{ Form::label($role->name, ucfirst($role->name)) }}<br>
  29.         @endforeach
  30. </div>
  31. <divclass="form-group @if ($errors->has('password')) has-error @endif">
  32.         {{ Form::label('password', 'Password') }}<br>
  33.         {{ Form::password('password', array('class' => 'form-control')) }}
  34. </div>
  35. <divclass="form-group @if ($errors->has('password')) has-error @endif">
  36.         {{ Form::label('password', 'Confirm Password') }}<br>
  37.         {{ Form::password('password_confirmation', array('class' => 'form-control')) }}
  38. </div>
  40.     {{ Form::submit('Update', array('class' => 'btn btn-primary')) }}
  41.     {{ Form::close() }}
  43. </div>
  45. @endsection
{{-- resourcesviewsusersedit.blade.php --}}

@extends('layouts.app')

@section('title', '| Update User')

@section('content')

<div class='col-lg-4 col-lg-offset-4'>

    <h1><i class='fa fa-user-plus'></i> Update {{$user->name}}</h1>
    <hr>

    {{ Form::model($user, array('route' => array('users.update', $user->id), 'method' => 'PUT')) }}

    <div >
        {{ Form::label('name', 'Name') }}
        {{ Form::text('name', null, array('class' => 'form-control')) }}
    </div>
    <div >
        {{ Form::label('email', 'Email') }}
        {{ Form::email('email', null, array('class' => 'form-control')) }}
    </div>
    <h5><b>Assign Role</b></h5>
    <div >
        @foreach ($roles as $role)
            {{ Form::checkbox('roles[]',  $role->id, $user->roles ) }}
            {{ Form::label($role->name, ucfirst($role->name)) }}<br>
        @endforeach
    </div>
    <div >
        {{ Form::label('password', 'Password') }}<br>
        {{ Form::password('password', array('class' => 'form-control')) }}
    </div>
    <div >
        {{ Form::label('password', 'Confirm Password') }}<br>
        {{ Form::password('password_confirmation', array('class' => 'form-control')) }}
    </div>

    {{ Form::submit('Update', array('class' => 'btn btn-primary')) }}
    {{ Form::close() }}

</div>

@endsection


Role Management Module

Now add following code in RoleController.php to create new role.


RoleController.php 

  1. <?php
  3. namespace AppHttpControllers;
  5. use AppRole;
  6. use AppPermission;
  7. use IlluminateHttpRequest;
  9. class RoleController extends Controller
  10. {
  12.     public function__construct()
  13. {
  14. $this->middleware('auth');
  15. }
  17.     public functionindex()
  18. {
  19. $roles= Role::all();
  20. returnview('roles.index',compact('roles'));
  21. }
  23. /**
  24.      * Show the form for creating a new resource.
  25.      *
  26.      * @return IlluminateHttpResponse
  27.      */
  28.     public functioncreate()
  29. {
  30. $permissions= Permission::all();//Get all permissions
  32. returnview('roles.create',compact('permissions'));
  33. }
  35. /**
  36.      * Store a newly created resource in storage.
  37.      *
  38.      * @param  IlluminateHttpRequest  $request
  39.      * @return IlluminateHttpResponse
  40.      */
  41.     public functionstore(Request $request)
  42. {
  43. $this->validate($request,[
  44. 'name'=>'required|unique:roles|max:10',
  45. 'permissions'=>'required',
  46. ]
  47. );
  49. $role=newRole();
  50. $role->name =$request->name;
  51. $role->save();
  52. if($request->permissions <>''){
  53. $role->permissions()->attach($request->permissions);
  54. }
  55. returnredirect()->route('roles.index')->with('success','Roles added successfully');
  56. }
  59.      public functionedit($id){
  60. $role= Role::findOrFail($id);
  61. $permissions= Permission::all();
  62. returnview('roles.edit',compact('role','permissions'));
  63. }
  65. /**
  66.      * Update the specified resource in storage.
  67.      *
  68.      * @param  IlluminateHttpRequest  $request
  69.      * @param  AppRole  $role
  70.      * @return IlluminateHttpResponse
  71.      */
  72.     public functionupdate(Request $request,$id)
  73. {
  74. $role= Role::findOrFail($id);//Get role with the given id
  75. //Validate name and permission fields
  76. $this->validate($request,[
  77. 'name'=>'required|max:10|unique:roles,name,'.$id,
  78. 'permissions'=>'required',
  79. ]);
  81. $input=$request->except(['permissions']);
  82. $role->fill($input)->save();
  83. if($request->permissions <>''){
  84. $role->permissions()->sync($request->permissions);
  85. }
  86. returnredirect()->route('roles.index')->with('success','Roles updated successfully');
  88. }
  90. /**
  91.      * Remove the specified resource from storage.
  92.      *
  93.      * @param  AppRole  $role
  94.      * @return IlluminateHttpResponse
  95.      */
  96.     public functiondestroy($id)
  97. {
  98. $role= Role::findOrFail($id);
  99. $role->delete();
  100. returnredirect()->route('roles.index')
  101. ->with('success',
  102. 'Role deleted successfully!');
  103. }
  104. }
<?php

namespace AppHttpControllers;

use AppRole;
use AppPermission;
use IlluminateHttpRequest;

class RoleController extends Controller
{
   
    public function __construct()
    {
        $this->middleware('auth');
    }

    public function index()
    {
        $roles = Role::all();
        return view('roles.index',compact('roles'));
    }

    /**
     * Show the form for creating a new resource.
     *
     * @return IlluminateHttpResponse
     */
    public function create()
    {
        $permissions = Permission::all();//Get all permissions

        return view('roles.create', compact('permissions'));
    }

    /**
     * Store a newly created resource in storage.
     *
     * @param  IlluminateHttpRequest  $request
     * @return IlluminateHttpResponse
     */
    public function store(Request $request)
    {
        $this->validate($request, [
            'name'=>'required|unique:roles|max:10',
            'permissions' =>'required',
            ]
        );

        $role = new Role();
        $role->name = $request->name;
        $role->save();
        if($request->permissions <> ''){
            $role->permissions()->attach($request->permissions);
        }
        return redirect()->route('roles.index')->with('success','Roles added successfully');
    }

   
     public function edit($id) {
        $role = Role::findOrFail($id);
        $permissions = Permission::all();
        return view('roles.edit', compact('role', 'permissions'));
    }

    /**
     * Update the specified resource in storage.
     *
     * @param  IlluminateHttpRequest  $request
     * @param  AppRole  $role
     * @return IlluminateHttpResponse
     */
    public function update(Request $request,$id)
    {
        $role = Role::findOrFail($id);//Get role with the given id
    //Validate name and permission fields
        $this->validate($request, [
            'name'=>'required|max:10|unique:roles,name,'.$id,
            'permissions' =>'required',
        ]);

        $input = $request->except(['permissions']);
        $role->fill($input)->save();
        if($request->permissions <> ''){
            $role->permissions()->sync($request->permissions);
        }
        return redirect()->route('roles.index')->with('success','Roles updated successfully');

    }

    /**
     * Remove the specified resource from storage.
     *
     * @param  AppRole  $role
     * @return IlluminateHttpResponse
     */
    public function destroy($id)
    {
        $role = Role::findOrFail($id);
        $role->delete();
        return redirect()->route('roles.index')
            ->with('success',
             'Role deleted successfully!');
    }
}


Role View
index.blade.php 

  1. @extends('layouts.app')
  3. @section('title', '| Roles')
  5. @section('content')
  7. <divclass="col-lg-10 col-lg-offset-1">
  8. <h1><iclass="fa fa-key"></i> Roles Management
  9. <ahref="{{ route('users.index') }}"class="btn btn-default pull-right">Users</a>
  10. <ahref="{{ route('permissions.index') }}"class="btn btn-default pull-right">Permissions</a>
  11. <ahref="{{ URL::to('roles/create') }}"class="btn btn-success">Add Role</a>
  12. </h1>
  13. <hr>
  14. <divclass="table-responsive">
  15. <tableclass="table table-bordered table-striped">
  16. <thead>
  17. <tr>
  18. <th>Role</th>
  19. <th>Permissions</th>
  20. <th>Action</th>
  21. </tr>
  22. </thead>
  24. <tbody>
  25.                 @foreach ($roles as $role)
  26. <tr>
  28. <td>{{ $role->name }}</td>
  30. <td>{{ str_replace(array('[',']','"'),'', $role->permissions()->pluck('name')) }}</td>
  31. <td>
  32. <ahref="{{ URL::to('roles/'.$role->id.'/edit') }}"class="btn btn-warning pull-left">Edit</a>
  33.                     {!! Form::open(['method' => 'DELETE', 'route' => ['roles.destroy', $role->id] ]) !!}
  34.                     {!! Form::submit('Delete', ['class' => 'btn btn-danger']) !!}
  35.                     {!! Form::close() !!}
  37. </td>
  38. </tr>
  39.                 @endforeach
  40. </tbody>
  41. </table>
  42. </div>
  43. </div>
  45. @endsection
@extends('layouts.app')

@section('title', '| Roles')

@section('content')

<div >
    <h1><i ></i> Roles Management
    <a href="{{ route('users.index') }}" >Users</a>
    <a href="{{ route('permissions.index') }}" >Permissions</a>
    <a href="{{ URL::to('roles/create') }}" >Add Role</a>
    </h1>
    <hr>
    <div >
        <table >
            <thead>
                <tr>
                    <th>Role</th>
                    <th>Permissions</th>
                    <th>Action</th>
                </tr>
            </thead>

            <tbody>
                @foreach ($roles as $role)
                <tr>

                    <td>{{ $role->name }}</td>

                    <td>{{ str_replace(array('[',']','"'),'', $role->permissions()->pluck('name')) }}</td>
                    <td>
                    <a href="{{ URL::to('roles/'.$role->id.'/edit') }}" >Edit</a>
                    {!! Form::open(['method' => 'DELETE', 'route' => ['roles.destroy', $role->id] ]) !!}
                    {!! Form::submit('Delete', ['class' => 'btn btn-danger']) !!}
                    {!! Form::close() !!}

                    </td>
                </tr>
                @endforeach
            </tbody>
        </table>
    </div>
</div>

@endsection


create.blade.php 

  1. {{-- resourcesviewsrolescreate.blade.php --}}
  2. @extends('layouts.app')
  3. @section('title', '| Create Role')
  4. @section('content')
  6. <divclass='col-lg-4col-lg-offset-4'>
  8. <h1><iclass='fafa-key'></i> Create Role</h1>
  9. <hr>
  10.     {{ Form::open(array('url' => 'roles')) }}
  12. <divclass="form-group">
  13.         {{ Form::label('name', 'Name') }}
  14.         {{ Form::text('name', null, array('class' => 'form-control')) }}
  15. </div>
  16. <h5><b>Assign Permissions</b></h5>
  17. <divclass='form-group'>
  18.         @foreach ($permissions as $permission)
  19.             {{ Form::checkbox('permissions[]',  $permission->id ) }}
  20.             {{ Form::label($permission->name, ucfirst($permission->name)) }}<br>
  22.         @endforeach
  23. </div>
  24.     {{ Form::submit('Save', array('class' => 'btn btn-primary')) }}
  26.     {{ Form::close() }}
  28. </div>
  30. @endsection
{{-- resourcesviewsrolescreate.blade.php --}}
@extends('layouts.app')
@section('title', '| Create Role')
@section('content')

<div class='col-lg-4 col-lg-offset-4'>

    <h1><i class='fa fa-key'></i> Create Role</h1>
    <hr>
    {{ Form::open(array('url' => 'roles')) }}

    <div >
        {{ Form::label('name', 'Name') }}
        {{ Form::text('name', null, array('class' => 'form-control')) }}
    </div>
    <h5><b>Assign Permissions</b></h5>
    <div class='form-group'>
        @foreach ($permissions as $permission)
            {{ Form::checkbox('permissions[]',  $permission->id ) }}
            {{ Form::label($permission->name, ucfirst($permission->name)) }}<br>

        @endforeach
    </div>
    {{ Form::submit('Save', array('class' => 'btn btn-primary')) }}

    {{ Form::close() }}

</div>

@endsection


edit.blade.php 

  1. @extends('layouts.app')
  2. @section('title', '| Update Role')
  3. @section('content')
  5. <divclass='col-md-4col-md-offset-4'>
  6. <h1><iclass='fafa-key'></i> Update Role: {{$role->name}}</h1>
  7. <hr>
  9.     {{ Form::model($role, array('route' => array('roles.update', $role->id), 'method' => 'PUT')) }}
  11. <divclass="form-group">
  12.         {{ Form::label('name', 'Role Name') }}
  13.         {{ Form::text('name', null, array('class' => 'form-control')) }}
  14. </div>
  15. <h3>Assign Permissions</h3>
  16.     @foreach ($permissions as $permission)
  18.         {{Form::checkbox('permissions[]',  $permission->id, $role->permissions ) }}
  19.         {{Form::label($permission->name, ucfirst($permission->name)) }}<br>
  21.     @endforeach
  22. <br>
  23.     {{ Form::submit('Edit', array('class' => 'btn btn-primary')) }}
  25.     {{ Form::close() }}    
  26. </div>
  28. @endsection
@extends('layouts.app')
@section('title', '| Update Role')
@section('content')

<div class='col-md-4 col-md-offset-4'>
    <h1><i class='fa fa-key'></i> Update Role: {{$role->name}}</h1>
    <hr>

    {{ Form::model($role, array('route' => array('roles.update', $role->id), 'method' => 'PUT')) }}

    <div >
        {{ Form::label('name', 'Role Name') }}
        {{ Form::text('name', null, array('class' => 'form-control')) }}
    </div>
    <h3>Assign Permissions</h3>
    @foreach ($permissions as $permission)

        {{Form::checkbox('permissions[]',  $permission->id, $role->permissions ) }}
        {{Form::label($permission->name, ucfirst($permission->name)) }}<br>

    @endforeach
    <br>
    {{ Form::submit('Edit', array('class' => 'btn btn-primary')) }}

    {{ Form::close() }}    
</div>

@endsection


Permission Management Module

Add following code in PermissionController.php.

  1. <?php
  3. namespace AppHttpControllers;
  5. use AppPermission;
  6. use AppRole;
  7. use IlluminateHttpRequest;
  9. class PermissionController extends Controller
  10. {
  12.     public function__construct()
  13. {
  14. $this->middleware('auth');
  15. }
  17.     public functionindex()
  18. {
  19. $permissions= Permission::all();
  20. returnview('permissions.index',compact('permissions'));
  21. }
  23. /**
  24.      * Show the form for creating a new resource.
  25.      *
  26.      * @return IlluminateHttpResponse
  27.      */
  28.     public functioncreate()
  29. {
  30. $roles= Role::get();//Get all roles
  31. returnview('permissions.create',compact('roles'));
  32. }
  34. /**
  35.      * Store a newly created resource in storage.
  36.      *
  37.      * @param  IlluminateHttpRequest  $request
  38.      * @return IlluminateHttpResponse
  39.      */
  40.     public functionstore(Request $request)
  41. {
  42. $this->validate($request,[
  43. 'name'=>'required|max:40',
  44. ]);
  45. $permission=newPermission();
  46. $permission->name =$request->name;
  47. $permission->save();
  49. if($request->roles <>''){
  50. foreach($request->roles as$key=>$value){
  51. $role= Role::find($value);
  52. $role->permissions()->attach($permission);
  53. }
  54. }
  55. returnredirect()->route('permissions.index')->with('success','Permission added successfully');
  57. }
  60.     public functionedit(Permission $permission)
  61. {
  62. returnview('permissions.edit',compact('permission'));
  63. }
  65. /**
  66.      * Update the specified resource in storage.
  67.      *
  68.      * @param  IlluminateHttpRequest  $request
  69.      * @param  AppPermission  $permission
  70.      * @return IlluminateHttpResponse
  71.      */
  72.     public functionupdate(Request $request, Permission $permission)
  73. {
  74. $this->validate($request,[
  75. 'name'=>'required',
  76. ]);
  77. $permission->name=$request->name;
  78. $permission->save();
  80. returnredirect()->route('permissions.index')
  81. ->with('success',
  82. 'Permission'.$permission->name.' updated!');
  84. }
  86. /**
  87.      * Remove the specified resource from storage.
  88.      *
  89.      * @param  AppPermission  $permission
  90.      * @return IlluminateHttpResponse
  91.      */
  92.     public functiondestroy(Permission $permission)
  93. {
  94. $permission->delete();
  95. returnredirect()->route('permissions.index')
  96. ->with('success',
  97. 'Permission deleted successfully!');
  98. }
  99. }
<?php

namespace AppHttpControllers;

use AppPermission;
use AppRole;
use IlluminateHttpRequest;

class PermissionController extends Controller
{
    
    public function __construct()
    {
        $this->middleware('auth');
    }

    public function index()
    {
        $permissions = Permission::all();
        return view('permissions.index',compact('permissions'));
    }

    /**
     * Show the form for creating a new resource.
     *
     * @return IlluminateHttpResponse
     */
    public function create()
    {
        $roles = Role::get(); //Get all roles
        return view('permissions.create',compact('roles'));
    }

    /**
     * Store a newly created resource in storage.
     *
     * @param  IlluminateHttpRequest  $request
     * @return IlluminateHttpResponse
     */
    public function store(Request $request)
    {
        $this->validate($request, [
            'name'=>'required|max:40',
        ]);
        $permission = new Permission();
        $permission->name = $request->name;
        $permission->save();

        if ($request->roles <> '') { 
            foreach ($request->roles as $key=>$value) {
                $role = Role::find($value); 
                $role->permissions()->attach($permission);
            }
        }
        return redirect()->route('permissions.index')->with('success','Permission added successfully');

    }

   
    public function edit(Permission $permission)
    {
        return view('permissions.edit', compact('permission'));
    }

    /**
     * Update the specified resource in storage.
     *
     * @param  IlluminateHttpRequest  $request
     * @param  AppPermission  $permission
     * @return IlluminateHttpResponse
     */
    public function update(Request $request, Permission $permission)
    {
        $this->validate($request, [
            'name'=>'required',
        ]);
        $permission->name=$request->name;
        $permission->save();

        return redirect()->route('permissions.index')
            ->with('success',
             'Permission'. $permission->name.' updated!');

    }

    /**
     * Remove the specified resource from storage.
     *
     * @param  AppPermission  $permission
     * @return IlluminateHttpResponse
     */
    public function destroy(Permission $permission)
    {
        $permission->delete();
        return redirect()->route('permissions.index')
            ->with('success',
             'Permission deleted successfully!');
    }
}


index.blade.php 

  1. {{-- resourcesviewspermissionsindex.blade.php --}}
  3. @extends('layouts.app')
  4. @section('title', '| Permissions')
  5. @section('content')
  7. <divclass="col-md-10 col-md-offset-1">
  8. <h1><iclass="fa fa-key"></i>Permissions Management
  9. <ahref="{{ route('users.index') }}"class="btn btn-default pull-right">Users</a>
  10. <ahref="{{ route('roles.index') }}"class="btn btn-default pull-right">Roles</a>
  11. <ahref="{{ URL::to('permissions/create') }}"class="btn btn-success">Add Permission</a>
  12. </h1>
  13. <hr>
  14. <divclass="table-responsive">
  15. <tableclass="table table-bordered table-striped">
  16. <thead>
  17. <tr>
  18. <th>Permissions</th>
  19. <th>Action</th>
  20. </tr>
  21. </thead>
  22. <tbody>
  23.                 @foreach ($permissions as $permission)
  24. <tr>
  25. <td>{{ $permission->name }}</td>
  26. <td>
  27. <ahref="{{ URL::to('permissions/'.$permission->id.'/edit') }}"class="btn btn-warning pull-left">Edit</a>
  29.                     {!! Form::open(['method' => 'DELETE', 'route' => ['permissions.destroy', $permission->id] ]) !!}
  30.                     {!! Form::submit('Delete', ['class' => 'btn btn-danger']) !!}
  31.                     {!! Form::close() !!}
  33. </td>
  34. </tr>
  35.                 @endforeach
  36. </tbody>
  37. </table>
  38. </div>
  39. </div>
  41. @endsection
{{-- resourcesviewspermissionsindex.blade.php --}}

@extends('layouts.app')
@section('title', '| Permissions')
@section('content')

<div >
    <h1><i ></i>Permissions Management
    <a href="{{ route('users.index') }}" >Users</a>
    <a href="{{ route('roles.index') }}" >Roles</a>
    <a href="{{ URL::to('permissions/create') }}" >Add Permission</a>
    </h1>
    <hr>
    <div >
        <table >
            <thead>
                <tr>
                    <th>Permissions</th>
                    <th>Action</th>
                </tr>
            </thead>
            <tbody>
                @foreach ($permissions as $permission)
                <tr>
                    <td>{{ $permission->name }}</td> 
                    <td>
                    <a href="{{ URL::to('permissions/'.$permission->id.'/edit') }}" >Edit</a>

                    {!! Form::open(['method' => 'DELETE', 'route' => ['permissions.destroy', $permission->id] ]) !!}
                    {!! Form::submit('Delete', ['class' => 'btn btn-danger']) !!}
                    {!! Form::close() !!}

                    </td>
                </tr>
                @endforeach
            </tbody>
        </table>
    </div>
</div>

@endsection


create.blade.php 

  1. @extends('layouts.app')
  2. @section('title', '| Create Permission')
  3. @section('content')
  5. <divclass='col-md-4col-md-offset-4'>
  7. <h1><iclass='fafa-key'></i> Create New Permission</h1>
  8. <br>
  10.     {{ Form::open(array('url' => 'permissions')) }}
  12. <divclass="form-group">
  13.         {{ Form::label('name', 'Name') }}
  14.         {{ Form::text('name', '', array('class' => 'form-control')) }}
  15. </div><br>
  16.     @if(!$roles->isEmpty()) 
  17. <h3>Assign Permission to Roles</h3>
  19.         @foreach ($roles as $role) 
  20.             {{ Form::checkbox('roles[]',  $role->id ) }}
  21.             {{ Form::label($role->name, ucfirst($role->name)) }}<br>
  22.         @endforeach
  23.     @endif
  24. <br>
  25.     {{ Form::submit('Save', array('class' => 'btn btn-primary')) }}
  26.     {{ Form::close() }}
  28. </div>
  30. @endsection
@extends('layouts.app')
@section('title', '| Create Permission')
@section('content')

<div class='col-md-4 col-md-offset-4'>

    <h1><i class='fa fa-key'></i> Create New Permission</h1>
    <br>

    {{ Form::open(array('url' => 'permissions')) }}

    <div >
        {{ Form::label('name', 'Name') }}
        {{ Form::text('name', '', array('class' => 'form-control')) }}
    </div><br>
    @if(!$roles->isEmpty()) 
        <h3>Assign Permission to Roles</h3>

        @foreach ($roles as $role) 
            {{ Form::checkbox('roles[]',  $role->id ) }}
            {{ Form::label($role->name, ucfirst($role->name)) }}<br>
        @endforeach
    @endif
    <br>
    {{ Form::submit('Save', array('class' => 'btn btn-primary')) }}
    {{ Form::close() }}

</div>

@endsection


edit.blade.php 

  1. @extends('layouts.app')
  3. @section('title', '| Update Permission')
  5. @section('content')
  7. <divclass='col-md-4col-md-offset-4'>
  9. <h1><iclass='fafa-key'></i> Update {{$permission->name}}</h1>
  10. <br>
  11.     {{ Form::model($permission, array('route' => array('permissions.update', $permission->id), 'method' => 'PUT')) }}
  13. <divclass="form-group">
  14.         {{ Form::label('name', 'Permission Name') }}
  15.         {{ Form::text('name', null, array('class' => 'form-control')) }}
  16. </div>
  17. <br>
  18.     {{ Form::submit('Update', array('class' => 'btn btn-primary')) }}
  20.     {{ Form::close() }}
  22. </div>
  24. @endsection
@extends('layouts.app')

@section('title', '| Update Permission')

@section('content')

<div class='col-md-4 col-md-offset-4'>

    <h1><i class='fa fa-key'></i> Update {{$permission->name}}</h1>
    <br>
    {{ Form::model($permission, array('route' => array('permissions.update', $permission->id), 'method' => 'PUT')) }}

    <div >
        {{ Form::label('name', 'Permission Name') }}
        {{ Form::text('name', null, array('class' => 'form-control')) }}
    </div>
    <br>
    {{ Form::submit('Update', array('class' => 'btn btn-primary')) }}

    {{ Form::close() }}

</div>

@endsection


Post Management Module
app/Http/Controllers/PostController.php 

  1. <?php
  3. namespace AppHttpControllers;
  5. use AppPost;
  6. use IlluminateHttpRequest;
  8. class PostController extends Controller
  9. {
  10.     public function__construct()
  11. {
  12. $this->middleware('auth');
  13. }
  15.     public functionindex()
  16. {
  17. $posts= Post::latest()->paginate(10);
  18. returnview('posts.index',compact('posts'));
  19. }
  20. }
<?php

namespace AppHttpControllers;

use AppPost;
use IlluminateHttpRequest;

class PostController extends Controller
{
    public function __construct()
    {
        $this->middleware('auth');
    }

    public function index()
    {
        $posts = Post::latest()->paginate(10); 
        return view('posts.index', compact('posts'));
    }
}


Post View

Now create index.blade.php file in resourcesviewspostsindex.blade.php.

  1. @extends('layouts.app')
  2. @section('content')
  3. <divclass="container">
  4. <divclass="row">
  5. <divclass="col-md-10 col-md-offset-1">
  6. <divclass="panel panel-default">
  7. <divclass="panel-heading">
  8. <h3>Posts Management</h3>
  9. </div>
  10. <divclass="panel-body">
  11. <divclass="table-responsive">
  12. <tableclass="table table-bordered table-striped">
  13. <thead>
  14. <tr>
  15. <th>Title</th>
  16. <th>Body</th>
  17. <th>Action</th>
  18. </tr>
  19. </thead>
  20. <tbody>
  21.                         @foreach ($posts as $post)
  22. <tr>
  23. <td>{{ $post->title }}</td>
  24. <td>{{ $post->body }}</td>
  25. <td>
  26.                               @can('editPost')
  27. <ahref="{{ route('posts.edit', $post->id) }}"class="btn btn-info pull-left">Edit</a>
  28.                               @endcan
  29.                               @can('deletePost')
  30.                               {!! Form::open(['method' => 'DELETE', 'route' => ['posts.destroy', $post->id] ]) !!}
  31.                               {!! Form::submit('Delete', ['class' => 'btn btn-danger']) !!}
  32.                               {!! Form::close() !!}
  33.                               @endcan
  34. </td>
  35. </tr>
  36.                         @endforeach
  37. </tbody>
  38. </table>
  39. </div>
  40. </div>
  41. </div>
  42. <divclass="text-center">
  43.             {!! $posts->render() !!}
  44. </div>
  45. </div>
  46. </div>
  47. </div>
  48. @endsection
@extends('layouts.app')
@section('content')
<div >
   <div >
      <div >
         <div >
            <div >
               <h3>Posts Management</h3>
            </div>
            <div >
               <div >
                  <table >
                     <thead>
                        <tr>
                           <th>Title</th>
                           <th>Body</th>
                           <th>Action</th>
                        </tr>
                     </thead>
                     <tbody>
                        @foreach ($posts as $post)
                        <tr>
                           <td>{{ $post->title }}</td>
                           <td>{{ $post->body }}</td>
                           <td>
                              @can('editPost')
                              <a href="{{ route('posts.edit', $post->id) }}" >Edit</a>
                              @endcan
                              @can('deletePost')
                              {!! Form::open(['method' => 'DELETE', 'route' => ['posts.destroy', $post->id] ]) !!}
                              {!! Form::submit('Delete', ['class' => 'btn btn-danger']) !!}
                              {!! Form::close() !!}
                              @endcan
                           </td>
                        </tr>
                        @endforeach
                     </tbody>
                  </table>
               </div>
            </div>
         </div>
         <div >
            {!! $posts->render() !!}
         </div>
      </div>
   </div>
</div>
@endsection

That’s it..

You can restrict routes for “User” role using middleware.

In middleware, We will authenticate the current user if user has “Admin” role then User will have full access.


Middleware 

  1. <?php
  3. namespace AppHttpMiddleware;
  5. use Closure;
  6. use IlluminateSupportFacadesAuth;
  8. class PermissionMiddleware {
  10.     public functionhandle($request, Closure $next){
  11. if(Auth::user()->hasRole('Admin'))//If user has admin role
  12. {
  13. return$next($request);
  14. }
  15. if(Auth::user()->hasRole('User'))//If user has user role
  16. {
  17. if($request->is('posts/create'))//If user is creating a post
  18. {
  19. if(!Auth::user()->hasPermissionTo('addPost'))
  20. {
  21. abort('401');
  22. }
  23. else{
  24. return$next($request);
  25. }
  26. }
  28. }
  29. return$next($request);
  30. }
  31. }
<?php

namespace AppHttpMiddleware;

use Closure;
use IlluminateSupportFacadesAuth;

class PermissionMiddleware {
    
    public function handle($request, Closure $next) {        
        if (Auth::user()->hasRole('Admin')) //If user has admin role
        {
            return $next($request);
        }
        if (Auth::user()->hasRole('User')) //If user has user role
        {
            if ($request->is('posts/create'))//If user is creating a post
            {
                if (!Auth::user()->hasPermissionTo('addPost'))
                {
                   abort('401');
                } 
                else {
                   return $next($request);
                }
            }

        }
        return $next($request);
    }
}

Now add the PermissionMiddleware::class to $routeMiddleware property in app/Http/kernel.php :

  1. protected $routeMiddleware=[
  2.      ....
  4.      'has_permission'=>AppHttpMiddlewarePermissionMiddleware::class,
  5. ];
protected $routeMiddleware = [
 	....

 	'has_permission' => AppHttpMiddlewarePermissionMiddleware::class,
];

In middleware, I redirect to user to 401 custom error page if the user does not have rights to access routes.


401.blade.php 

  1. {{-- resourcesviewserrors401.blade.php --}}
  2. @extends('layouts.app')
  4. @section('content')
  5. <divclass='col-md-4col-md-offset-4'>
  6. <h3><center>401<br>
  7.         You do not have permission</center></h3>
  8. </div>
  10. @endsection
{{-- resourcesviewserrors401.blade.php --}}
@extends('layouts.app')

@section('content')
    <div class='col-md-4 col-md-offset-4'>
        <h3><center>401<br>
        You do not have permission</center></h3>
    </div>

@endsection

Now you can set the middleware to route group like this :

  1. Route::group(['middleware'=>['auth','has_permission']],function(){
  3. });
Route::group( ['middleware' => ['auth','has_permission']], function() {
   
});

Hope this code and post will helped you for implement Laravel 5.4 User Role and Permissions (ACL) with Spatie Laravel-Permission Middlware. if you need any help or any feedback give it in comment section or you have good idea about this post you can give it comment section. Your comment will help us for help you more and improve us. we will give you this type of more interesting post in featured also so, For more interesting post and code Keep reading our blogs

For More Info See :: laravel And github

Leave a Comment

Your email address will not be published. Required fields are marked *

  +  17  =  26

We're accepting well-written guest posts and this is a great opportunity to collaborate : Contact US