├── .gitignore
├── LICENSE.txt
├── README.md
├── composer.json
├── resources
    ├── lang
    │   └── en
    │   │   ├── navigation.php
    │   │   ├── permissions.php
    │   │   ├── resources.php
    │   │   └── roles.php
    └── views
    │   └── navigation.blade.php
└── src
    ├── ForgetCachedPermissions.php
    ├── LaravelNovaPermission.php
    ├── NovaPermissionServiceProvider.php
    ├── Permission.php
    ├── PermissionResourceTrait.php
    ├── PermissionsBasedAuthTrait.php
    ├── Role.php
    └── RoleResourceTrait.php


/.gitignore:
--------------------------------------------------------------------------------
 1 | /.idea
 2 | /vendor
 3 | /node_modules
 4 | package-lock.json
 5 | composer.phar
 6 | composer.lock
 7 | phpunit.xml
 8 | .phpunit.result.cache
 9 | .DS_Store
10 | Thumbs.db
11 | 


--------------------------------------------------------------------------------
/LICENSE.txt:
--------------------------------------------------------------------------------
 1 | MIT License
 2 | 
 3 | Copyright (c) 2018 Insense Private Limited
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
 6 | 
 7 | The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
 8 | 
 9 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
10 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
  1 | # A Laravel Nova tool for the Spatie Permission package
  2 | 
  3 |  [![License](https://poser.pugx.org/insenseanalytics/laravel-nova-permission/license)](https://packagist.org/packages/insenseanalytics/laravel-nova-permission)
  4 |  [![Latest Stable Version](https://poser.pugx.org/insenseanalytics/laravel-nova-permission/v/stable)](https://packagist.org/packages/insenseanalytics/laravel-nova-permission)
  5 |  [![Scrutinizer Code Quality](https://scrutinizer-ci.com/g/insenseanalytics/laravel-nova-permission/badges/quality-score.png?b=master)](https://scrutinizer-ci.com/g/insenseanalytics/laravel-nova-permission/?branch=master)
  6 |  [![Total Downloads](https://poser.pugx.org/insenseanalytics/laravel-nova-permission/downloads)](https://packagist.org/packages/insenseanalytics/laravel-nova-permission)
  7 | 
  8 | This [Nova](https://nova.laravel.com) tool lets you:
  9 | - manage roles and permissions on the Nova dashboard
 10 | - use permissions based authorization for Nova resources
 11 | 
 12 | ## Screenshots
 13 | <img alt="screenshot of the backup tool" src="https://insenseanalytics.github.io/public-assets/laravel-nova-permission/nova-permission-screenshot.png" />
 14 | 
 15 | ## Requirements & Dependencies
 16 | There are no PHP dependencies except the [Laravel Nova](https://nova.laravel.com) package and the [Spatie Permission](https://github.com/spatie/laravel-permission) package.
 17 | 
 18 | ## Installation
 19 | You can install this tool into a Laravel app that uses [Nova](https://nova.laravel.com) via composer:
 20 | 
 21 | ```bash
 22 | composer require insenseanalytics/laravel-nova-permission
 23 | ```
 24 | 
 25 | Next, if you do not have package discovery enabled, you need to register the provider in the `config/app.php` file.
 26 | ```php
 27 | 'providers' => [
 28 |     ...,
 29 |     Insenseanalytics\LaravelNovaPermission\NovaPermissionServiceProvider::class,
 30 | ]
 31 | ```
 32 | 
 33 | Next, you must register the tool with Nova. This is typically done in the `tools` method of the `NovaServiceProvider`.
 34 | 
 35 | ```php
 36 | // in app/Providers/NovaServiceProvider.php
 37 | 
 38 | public function tools()
 39 | {
 40 |     return [
 41 |         // ...
 42 |         \Insenseanalytics\LaravelNovaPermission\LaravelNovaPermission::make(),
 43 |     ];
 44 | }
 45 | ```
 46 | 
 47 | Next, add `MorphToMany` fields to your `app/Nova/User` resource:
 48 | 
 49 | ```php
 50 | use Laravel\Nova\Fields\MorphToMany;
 51 | 
 52 | public function fields(Request $request)
 53 | {
 54 |     return [
 55 |         // ...
 56 |         MorphToMany::make('Roles', 'roles', \Insenseanalytics\LaravelNovaPermission\Role::class),
 57 |         MorphToMany::make('Permissions', 'permissions', \Insenseanalytics\LaravelNovaPermission\Permission::class),
 58 |     ];
 59 | }
 60 | ```
 61 | 
 62 | Finally, add the `ForgetCachedPermissions` class to your `config/nova.php` middleware like so:
 63 | 
 64 | ```php
 65 | // in config/nova.php
 66 | 'middleware' => [
 67 | 	'web',
 68 | 	Authenticate::class,
 69 | 	DispatchServingNovaEvent::class,
 70 | 	BootTools::class,
 71 | 	Authorize::class,
 72 | 	\Insenseanalytics\LaravelNovaPermission\ForgetCachedPermissions::class,
 73 | ],
 74 | ```
 75 | 
 76 | ## Localization
 77 | 
 78 | You can use the artisan command line tool to publish localization files:
 79 | 
 80 | ```php
 81 | php artisan vendor:publish --provider="Insenseanalytics\LaravelNovaPermission\NovaPermissionServiceProvider"
 82 | ```
 83 | 
 84 | ## Using Custom Role/Permission Resource Classes
 85 | 
 86 | If you want to use custom resource classes you can define them when you register a tool:
 87 | 
 88 | ```php
 89 | // in app/Providers/NovaServiceProvider.php
 90 | 
 91 | public function tools()
 92 | {
 93 |     return [
 94 |         // ...
 95 |         \Insenseanalytics\LaravelNovaPermission\LaravelNovaPermission::make()
 96 |             ->roleResource(CustomRole::class)
 97 |             ->permissionResource(CustomPermission::class),
 98 |     ];
 99 | }
100 | ```
101 | 
102 | ## Permissions Based Authorization for Nova Resources
103 | By default, Laravel Nova uses Policy based authorization for Nova resources. If you are using the Spatie Permission library, it is very likely that you would want to swap this out to permission based authorization without the need to define Authorization policies.
104 | 
105 | To do so, you can use the `PermissionsBasedAuthTrait` and define a `permissionsForAbilities` static array property in your Nova resource class like so:
106 | 
107 | ```php
108 | // in app/Nova/YourNovaResource.php
109 | 
110 | class YourNovaResource extends Resource
111 | {
112 |     use \Insenseanalytics\LaravelNovaPermission\PermissionsBasedAuthTrait;
113 | 
114 |     public static $permissionsForAbilities = [
115 |       'all' => 'manage products',
116 |     ];
117 | }
118 | ```
119 | 
120 | The example above means that all actions on this resource can be performed by users who have the "manage products" permission. You can also define separate permissions for each action like so:
121 | 
122 | ```php
123 |     public static $permissionsForAbilities = [
124 |       'viewAny' => 'view products',
125 |       'view' => 'view products',
126 |       'create' => 'create products',
127 |       'update' => 'update products',
128 |       'delete' => 'delete products',
129 |       'restore' => 'restore products',
130 |       'forceDelete' => 'forceDelete products',
131 |       'addAttribute' => 'add product attributes',
132 |       'attachAttribute' => 'attach product attributes',
133 |       'detachAttribute' => 'detach product attributes',
134 |     ];
135 | ```
136 | 
137 | ### Relationships 
138 | To allow your users to specify a relationship on your model, you will need to add another permission on the Model. 
139 | For example, if your `Product` belongs to `User`, add the following permission on `app/Nova/User.php`. : 
140 | 
141 | ```php
142 |     public static $permissionsForAbilities = [
143 |       'addProduct' => 'add user on products'
144 |     ];
145 | ```
146 | 
147 | ## Contributing
148 | 
149 | Contributions are welcome and will be fully credited as long as you use PSR-2, explain the issue/feature that you want to solve/add and back your code up with tests. Happy coding!
150 | 
151 | ## License
152 | 
153 | The MIT License (MIT). Please see [License File](LICENSE.txt) for more information.
154 | 


--------------------------------------------------------------------------------
/composer.json:
--------------------------------------------------------------------------------
 1 | {
 2 |     "name": "insenseanalytics/laravel-nova-permission",
 3 |     "description": "A Laravel Nova tool for Spatie's Permission library.",
 4 |     "keywords": [
 5 |         "laravel",
 6 |         "nova",
 7 |         "spatie",
 8 |         "laravel-permission"
 9 |     ],
10 |     "license": "MIT",
11 |     "require": {
12 |         "php": ">=7.1.0",
13 |         "spatie/laravel-permission": "^2.16|^3.0"
14 |     },
15 |     "autoload": {
16 |         "psr-4": {
17 |             "Insenseanalytics\\LaravelNovaPermission\\": "src/"
18 |         }
19 |     },
20 |     "extra": {
21 |         "laravel": {
22 |             "providers": [
23 |                 "Insenseanalytics\\LaravelNovaPermission\\NovaPermissionServiceProvider"
24 |             ]
25 |         }
26 |     },
27 |     "config": {
28 |         "sort-packages": true
29 |     },
30 |     "minimum-stability": "dev",
31 |     "prefer-stable": true
32 | }


--------------------------------------------------------------------------------
/resources/lang/en/navigation.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | return [
4 |     'sidebar-label' => 'Roles & Permissions',
5 | ];


--------------------------------------------------------------------------------
/resources/lang/en/permissions.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | return [
4 |     'name'         => 'Name',
5 |     'display_name' => 'Display Name',
6 |     'guard_name'   => 'Guard Name',
7 |     'created_at'   => 'Created at',
8 |     'updated_at'   => 'Updated at',
9 | ];


--------------------------------------------------------------------------------
/resources/lang/en/resources.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | return [
4 |     'Roles'       => 'Roles',
5 |     'Role'        => 'Role',
6 |     'Permissions' => 'Permissions',
7 |     'Permission'  => 'Permission',
8 | ];


--------------------------------------------------------------------------------
/resources/lang/en/roles.php:
--------------------------------------------------------------------------------
1 | <?php
2 | 
3 | return [
4 |     'name'       => 'Name',
5 |     'guard_name' => 'Guard Name',
6 |     'created_at' => 'Created at',
7 |     'updated_at' => 'Updated at',
8 | ];


--------------------------------------------------------------------------------
/resources/views/navigation.blade.php:
--------------------------------------------------------------------------------
 1 | <?php 
 2 | use Laravel\Nova\Nova;
 3 | use Spatie\Permission\PermissionRegistrar;
 4 | ?>
 5 | 
 6 | @if ((Nova::resourceForModel(app(PermissionRegistrar::class)->getRoleClass()))::authorizedToViewAny(request()) || (Nova::resourceForModel(app(PermissionRegistrar::class)->getPermissionClass()))::authorizedToViewAny(request()))
 7 |     <h3 class="flex items-center font-normal text-white mb-6 text-base no-underline">
 8 |         <svg class="sidebar-icon" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">
 9 |             <path fill="var(--sidebar-icon)"
10 |                   d="M7 10V7a5 5 0 1 1 10 0v3h2a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-8c0-1.1.9-2 2-2h2zm2 0h6V7a3 3 0 0 0-6 0v3zm-4 2v8h14v-8H5zm7 2a1 1 0 0 1 1 1v2a1 1 0 0 1-2 0v-2a1 1 0 0 1 1-1z"/>
11 |         </svg>
12 |         <span class="sidebar-label">
13 |                 @lang('laravel-nova-permission::navigation.sidebar-label')
14 |         </span>
15 |     </h3>
16 | 
17 |     <ul class="list-reset mb-8">
18 | 
19 |         @if((Nova::resourceForModel(app(PermissionRegistrar::class)->getRoleClass()))::authorizedToViewAny(request()))
20 |         <li class="leading-wide mb-4 text-sm">
21 |             <router-link :to="{
22 |                 name: 'index',
23 |                 params: {
24 |                     resourceName: 'roles'
25 |                 }
26 |             }" class="text-white ml-8 no-underline dim">
27 |                 @lang('laravel-nova-permission::resources.Roles')
28 |             </router-link>
29 |         </li>
30 |         @endif
31 | 
32 |         @if((Nova::resourceForModel(app(PermissionRegistrar::class)->getPermissionClass()))::authorizedToViewAny(request()))
33 |         <li class="leading-wide mb-4 text-sm">
34 |             <router-link :to="{
35 |                 name: 'index',
36 |                 params: {
37 |                     resourceName: 'permissions'
38 |                 }
39 |             }" class="text-white ml-8 no-underline dim">
40 |                 @lang('laravel-nova-permission::resources.Permissions')
41 |             </router-link>
42 |         </li>
43 |         @endif
44 | 
45 |     </ul>
46 | @endif


--------------------------------------------------------------------------------
/src/ForgetCachedPermissions.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace Insenseanalytics\LaravelNovaPermission;
 4 | 
 5 | use Laravel\Nova\Nova;
 6 | use Spatie\Permission\PermissionRegistrar;
 7 | 
 8 | class ForgetCachedPermissions
 9 | {
10 | 	/**
11 | 	 * Handle the incoming request.
12 | 	 *
13 | 	 * @param \Illuminate\Http\Request $request
14 | 	 * @param \Closure                 $next
15 | 	 *
16 | 	 * @return \Illuminate\Http\Response
17 | 	 */
18 | 	public function handle($request, $next)
19 | 	{
20 | 		$response = $next($request);
21 | 
22 | 		if ($request->is('nova-api/*/detach') ||
23 | 			$request->is('nova-api/*/*/attach/*')) {
24 | 			$permissionKey = (Nova::resourceForModel(app(PermissionRegistrar::class)->getPermissionClass()))::uriKey();
25 | 
26 | 			if ($request->viaRelationship === $permissionKey) {
27 | 				app(PermissionRegistrar::class)->forgetCachedPermissions();
28 | 			}
29 | 		}
30 | 
31 | 		return $response;
32 | 	}
33 | }
34 | 


--------------------------------------------------------------------------------
/src/LaravelNovaPermission.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace Insenseanalytics\LaravelNovaPermission;
 4 | 
 5 | use Laravel\Nova\Tool;
 6 | use Laravel\Nova\Nova;
 7 | 
 8 | class LaravelNovaPermission extends Tool
 9 | {
10 | 	public $roleResource = Role::class;
11 | 	public $permissionResource = Permission::class;
12 | 
13 | 	public $registerCustomResources = false;
14 | 
15 | 	/**
16 | 	 * Perform any tasks that need to happen when the tool is booted.
17 | 	 */
18 | 	public function boot()
19 | 	{
20 | 		if ((Role::class === $this->roleResource && Permission::class === $this->permissionResource)
21 | 			|| $this->registerCustomResources) {
22 | 			Nova::resources([
23 | 				$this->roleResource,
24 | 				$this->permissionResource,
25 | 			]);
26 | 		}
27 | 	}
28 | 
29 | 	/**
30 | 	 * Set a custom Role resource class.
31 | 	 *
32 | 	 * @param Role resource class
33 | 	 *
34 | 	 * @return $this
35 | 	 */
36 | 	public function roleResource(string $roleResource)
37 | 	{
38 | 		$this->roleResource = $roleResource;
39 | 
40 | 		return $this;
41 | 	}
42 | 
43 | 	/**
44 | 	 * Set a custom Permission resource class.
45 | 	 *
46 | 	 * @param Permission resource class
47 | 	 *
48 | 	 * @return $this
49 | 	 */
50 | 	public function permissionResource(string $permissionResource)
51 | 	{
52 | 		$this->permissionResource = $permissionResource;
53 | 
54 | 		return $this;
55 | 	}
56 | 
57 | 	/**
58 | 	 * Register the custom resource classes.
59 | 	 *
60 | 	 * @param bool
61 | 	 *
62 | 	 * @return $this
63 | 	 */
64 | 	public function withRegistration()
65 | 	{
66 | 		$this->registerCustomResources = true;
67 | 
68 | 		return $this;
69 | 	}
70 | 
71 | 	/**
72 | 	 * Build the view that renders the navigation links for the tool.
73 | 	 *
74 | 	 * @return \Illuminate\View\View
75 | 	 */
76 | 	public function renderNavigation()
77 | 	{
78 | 		return view('laravel-nova-permission::navigation');
79 | 	}
80 | }
81 | 


--------------------------------------------------------------------------------
/src/NovaPermissionServiceProvider.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace Insenseanalytics\LaravelNovaPermission;
 4 | 
 5 | use Illuminate\Support\ServiceProvider;
 6 | 
 7 | class NovaPermissionServiceProvider extends ServiceProvider
 8 | {
 9 | 	/**
10 | 	 * Bootstrap any application services.
11 | 	 */
12 | 	public function boot()
13 | 	{
14 | 		$this->loadViewsFrom(__DIR__ . '/../resources/views', 'laravel-nova-permission');
15 | 		$this->loadTranslationsFrom(__DIR__.'/../resources/lang', 'laravel-nova-permission');
16 | 
17 | 		$this->publishes([
18 | 			__DIR__.'/../resources/lang' => resource_path('lang/vendor/laravel-nova-permission'),
19 | 		], 'laravel-nova-permission-lang');
20 | 	}
21 | 
22 | 	/**
23 | 	 * Register any application services.
24 | 	 */
25 | 	public function register()
26 | 	{
27 | 	}
28 | }
29 | 


--------------------------------------------------------------------------------
/src/Permission.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace Insenseanalytics\LaravelNovaPermission;
 4 | 
 5 | use Laravel\Nova\Resource;
 6 | use Spatie\Permission\Models\Permission as SpatiePermission;
 7 | 
 8 | class Permission extends Resource
 9 | {
10 | 	use PermissionResourceTrait;
11 | 
12 | 	/**
13 | 	 * The model the resource corresponds to.
14 | 	 *
15 | 	 * @var string
16 | 	 */
17 | 	public static $model = SpatiePermission::class;
18 | 
19 | 	/**
20 | 	 * The single value that should be used to represent the resource when being displayed.
21 | 	 *
22 | 	 * @var string
23 | 	 */
24 | 	public static $title = 'name';
25 | 
26 | 	/**
27 | 	 * The columns that should be searched.
28 | 	 *
29 | 	 * @var array
30 | 	 */
31 | 	public static $search = [
32 | 		'name',
33 | 	];
34 | 
35 | 	/**
36 | 	 * Indicates if the resource should be displayed in the sidebar.
37 | 	 *
38 | 	 * @var bool
39 | 	 */
40 | 	public static $displayInNavigation = false;
41 | 
42 | 	/**
43 | 	 * Get the displayable label of the resource.
44 | 	 *
45 | 	 * @return string
46 | 	 */
47 | 	public static function label()
48 | 	{
49 | 		return __('laravel-nova-permission::resources.Permissions');
50 | 	}
51 | 
52 | 	/**
53 | 	 * Get the displayable singular label of the resource.
54 | 	 *
55 | 	 * @return string
56 | 	 */
57 | 	public static function singularLabel()
58 | 	{
59 | 		return __('laravel-nova-permission::resources.Permission');
60 | 	}
61 | }
62 | 


--------------------------------------------------------------------------------
/src/PermissionResourceTrait.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace Insenseanalytics\LaravelNovaPermission;
 4 | 
 5 | use Laravel\Nova\Http\Requests\NovaRequest;
 6 | use Laravel\Nova\Nova;
 7 | use Laravel\Nova\Fields\ID;
 8 | use Illuminate\Http\Request;
 9 | use Laravel\Nova\Fields\Text;
10 | use Illuminate\Validation\Rule;
11 | use Laravel\Nova\Fields\Select;
12 | use Laravel\Nova\Fields\DateTime;
13 | use Laravel\Nova\Fields\MorphToMany;
14 | use Laravel\Nova\Fields\BelongsToMany;
15 | use Spatie\Permission\PermissionRegistrar;
16 | 
17 | trait PermissionResourceTrait
18 | {
19 | 	public static function getModel()
20 | 	{
21 | 		return app(PermissionRegistrar::class)->getPermissionClass();
22 | 	}
23 | 
24 | 	/**
25 | 	 * Get the fields displayed by the resource.
26 | 	 *
27 | 	 * @param \Illuminate\Http\Request $request
28 | 	 *
29 | 	 * @return array
30 | 	 */
31 | 	public function fields(Request $request)
32 | 	{
33 | 		$guardOptions = collect(config('auth.guards'))->mapWithKeys(function ($value, $key) {
34 | 			return [$key => $key];
35 | 		});
36 | 
37 | 		$userResource = Nova::resourceForModel(getModelForGuard($this->guard_name));
38 | 
39 | 		$roleResource = Nova::resourceForModel(app(PermissionRegistrar::class)->getRoleClass());
40 | 
41 | 		return [
42 | 			ID::make()->sortable(),
43 | 
44 | 			Text::make(__('laravel-nova-permission::permissions.name'), 'name')
45 | 				->rules(['required', 'string', 'max:255'])
46 | 				->creationRules('unique:' . config('permission.table_names.permissions'))
47 | 				->updateRules('unique:' . config('permission.table_names.permissions') . ',name,{{resourceId}}'),
48 | 
49 | 			Text::make(__('laravel-nova-permission::permissions.display_name'),function (){
50 | 				return __('laravel-nova-permission::permissions.display_names.'.$this->name);
51 | 			})->canSee(function (){
52 | 				return is_array(__('laravel-nova-permission::permissions.display_names'));
53 | 			}),
54 | 
55 | 			Select::make(__('laravel-nova-permission::permissions.guard_name'), 'guard_name')
56 | 				->options($guardOptions->toArray())
57 | 				->rules(['required', Rule::in($guardOptions)]),
58 | 
59 | 			DateTime::make(__('laravel-nova-permission::permissions.created_at'), 'created_at')->exceptOnForms(),
60 | 
61 | 			DateTime::make(__('laravel-nova-permission::permissions.updated_at'), 'updated_at')->exceptOnForms(),
62 | 
63 | 			BelongsToMany::make($roleResource::label(), 'roles', $roleResource)->searchable(),
64 | 
65 | 			MorphToMany::make($userResource::label(), 'users', $userResource)->searchable(),
66 | 		];
67 | 	}
68 | }
69 | 


--------------------------------------------------------------------------------
/src/PermissionsBasedAuthTrait.php:
--------------------------------------------------------------------------------
  1 | <?php
  2 | 
  3 | namespace Insenseanalytics\LaravelNovaPermission;
  4 | 
  5 | use Illuminate\Support\Str;
  6 | use Illuminate\Http\Request;
  7 | use Laravel\Nova\Http\Requests\NovaRequest;
  8 | use Illuminate\Auth\Access\AuthorizationException;
  9 | 
 10 | trait PermissionsBasedAuthTrait
 11 | {
 12 | 	/**
 13 | 	 * Determine if the given resource is authorizable.
 14 | 	 *
 15 | 	 * @return bool
 16 | 	 */
 17 | 	public static function authorizable()
 18 | 	{
 19 | 		return true;
 20 | 	}
 21 | 
 22 | 	/**
 23 | 	 * Determine if the resource should be available for the given request.
 24 | 	 *
 25 | 	 * @param \Illuminate\Http\Request $request
 26 | 	 *
 27 | 	 * @return bool
 28 | 	 */
 29 | 	public function authorizeToViewAny(Request $request)
 30 | 	{
 31 | 		if (!static::authorizable()) {
 32 | 			return;
 33 | 		}
 34 | 
 35 | 		return $this->authorizeTo($request, 'viewAny');
 36 | 	}
 37 | 
 38 | 	/**
 39 | 	 * Determine if the resource should be available for the given request.
 40 | 	 *
 41 | 	 * @param \Illuminate\Http\Request $request
 42 | 	 *
 43 | 	 * @return bool
 44 | 	 */
 45 | 	public static function authorizedToViewAny(Request $request)
 46 | 	{
 47 | 		if (!static::authorizable()) {
 48 | 			return true;
 49 | 		}
 50 | 
 51 | 		return static::hasPermissionsTo($request, 'viewAny');
 52 | 	}
 53 | 
 54 | 	/**
 55 | 	 * Determine if the current user can view the given resource or throw an exception.
 56 | 	 *
 57 | 	 * @param \Illuminate\Http\Request $request
 58 | 	 *
 59 | 	 * @throws \Illuminate\Auth\Access\AuthorizationException
 60 | 	 */
 61 | 	public function authorizeToView(Request $request)
 62 | 	{
 63 | 		return $this->authorizeTo($request, 'view') && $this->authorizeToViewAny($request);
 64 | 	}
 65 | 
 66 | 	/**
 67 | 	 * Determine if the current user can create new resources.
 68 | 	 *
 69 | 	 * @param \Illuminate\Http\Request $request
 70 | 	 *
 71 | 	 * @return bool
 72 | 	 */
 73 | 	public static function authorizedToCreate(Request $request)
 74 | 	{
 75 | 		return static::hasPermissionsTo($request, 'create');
 76 | 	}
 77 | 
 78 | 	/**
 79 | 	 * Determine if the user can add / associate models of the given type to the resource.
 80 | 	 *
 81 | 	 * @param \Laravel\Nova\Http\Requests\NovaRequest    $request
 82 | 	 * @param \Illuminate\Database\Eloquent\Model|string $model
 83 | 	 *
 84 | 	 * @return bool
 85 | 	 */
 86 | 	public function authorizedToAdd(NovaRequest $request, $model)
 87 | 	{
 88 | 		if (!static::authorizable()) {
 89 | 			return true;
 90 | 		}
 91 | 
 92 | 		$method = 'add' . class_basename($model);
 93 | 
 94 | 		return $this->authorizedTo($request, $method);
 95 | 	}
 96 | 
 97 | 	/**
 98 | 	 * Determine if the user can attach any models of the given type to the resource.
 99 | 	 *
100 | 	 * @param \Laravel\Nova\Http\Requests\NovaRequest    $request
101 | 	 * @param \Illuminate\Database\Eloquent\Model|string $model
102 | 	 *
103 | 	 * @return bool
104 | 	 */
105 | 	public function authorizedToAttachAny(NovaRequest $request, $model)
106 | 	{
107 | 		if (!static::authorizable()) {
108 | 			return true;
109 | 		}
110 | 
111 | 		$method = 'attachAny' . Str::singular(class_basename($model));
112 | 
113 | 		return $this->authorizedTo($request, $method);
114 | 	}
115 | 
116 | 	/**
117 | 	 * Determine if the user can attach models of the given type to the resource.
118 | 	 *
119 | 	 * @param \Laravel\Nova\Http\Requests\NovaRequest    $request
120 | 	 * @param \Illuminate\Database\Eloquent\Model|string $model
121 | 	 *
122 | 	 * @return bool
123 | 	 */
124 | 	public function authorizedToAttach(NovaRequest $request, $model)
125 | 	{
126 | 		if (!static::authorizable()) {
127 | 			return true;
128 | 		}
129 | 
130 | 		$method = 'attach' . Str::singular(class_basename($model));
131 | 
132 | 		return $this->authorizedTo($request, $method);
133 | 	}
134 | 
135 | 	/**
136 | 	 * Determine if the user can detach models of the given type to the resource.
137 | 	 *
138 | 	 * @param \Laravel\Nova\Http\Requests\NovaRequest    $request
139 | 	 * @param \Illuminate\Database\Eloquent\Model|string $model
140 | 	 * @param string                                     $relationship
141 | 	 *
142 | 	 * @return bool
143 | 	 */
144 | 	public function authorizedToDetach(NovaRequest $request, $model, $relationship)
145 | 	{
146 | 		if (!static::authorizable()) {
147 | 			return true;
148 | 		}
149 | 
150 | 		$method = 'detach' . Str::singular(class_basename($model));
151 | 
152 | 		return $this->authorizedTo($request, $method);
153 | 	}
154 | 
155 | 	/**
156 | 	 * Determine if the current user has a given ability.
157 | 	 *
158 | 	 * @param \Illuminate\Http\Request $request
159 | 	 * @param string                   $ability
160 | 	 *
161 | 	 * @throws \Illuminate\Auth\Access\AuthorizationException
162 | 	 */
163 | 	public function authorizeTo(Request $request, $ability)
164 | 	{
165 | 		throw_unless($this->authorizedTo($request, $ability), AuthorizationException::class);
166 | 	}
167 | 
168 | 	/**
169 | 	 * Determine if the current user can view the given resource.
170 | 	 *
171 | 	 * @param \Illuminate\Http\Request $request
172 | 	 * @param string                   $ability
173 | 	 *
174 | 	 * @return bool
175 | 	 */
176 | 	public function authorizedTo(Request $request, $ability)
177 | 	{
178 | 		return static::authorizable() ? static::hasPermissionsTo($request, $ability) : true;
179 | 	}
180 | 
181 | 	public static function hasPermissionsTo(Request $request, $ability)
182 | 	{
183 | 		if (isset(static::$permissionsForAbilities[$ability])) {
184 | 			return $request->user()->can(static::$permissionsForAbilities[$ability]);
185 | 		}
186 | 
187 | 		if (isset(static::$permissionsForAbilities['all'])) {
188 | 			return $request->user()->can(static::$permissionsForAbilities['all']);
189 | 		}
190 | 
191 | 		return false;
192 | 	}
193 | }
194 | 


--------------------------------------------------------------------------------
/src/Role.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace Insenseanalytics\LaravelNovaPermission;
 4 | 
 5 | use Laravel\Nova\Resource;
 6 | use Spatie\Permission\Models\Role as SpatieRole;
 7 | 
 8 | class Role extends Resource
 9 | {
10 | 	use RoleResourceTrait;
11 | 
12 | 	/**
13 | 	 * The model the resource corresponds to.
14 | 	 *
15 | 	 * @var string
16 | 	 */
17 | 	public static $model = SpatieRole::class;
18 | 
19 | 	/**
20 | 	 * The single value that should be used to represent the resource when being displayed.
21 | 	 *
22 | 	 * @var string
23 | 	 */
24 | 	public static $title = 'name';
25 | 
26 | 	/**
27 | 	 * The columns that should be searched.
28 | 	 *
29 | 	 * @var array
30 | 	 */
31 | 	public static $search = [
32 | 		'name',
33 | 	];
34 | 
35 | 	/**
36 | 	 * Indicates if the resource should be displayed in the sidebar.
37 | 	 *
38 | 	 * @var bool
39 | 	 */
40 | 	public static $displayInNavigation = false;
41 | 
42 | 	/**
43 | 	 * Get the displayable label of the resource.
44 | 	 *
45 | 	 * @return string
46 | 	 */
47 | 	public static function label()
48 | 	{
49 | 		return __('laravel-nova-permission::resources.Roles');
50 | 	}
51 | 
52 | 	/**
53 | 	 * Get the displayable singular label of the resource.
54 | 	 *
55 | 	 * @return string
56 | 	 */
57 | 	public static function singularLabel()
58 | 	{
59 | 		return __('laravel-nova-permission::resources.Role');
60 | 	}
61 | }
62 | 


--------------------------------------------------------------------------------
/src/RoleResourceTrait.php:
--------------------------------------------------------------------------------
 1 | <?php
 2 | 
 3 | namespace Insenseanalytics\LaravelNovaPermission;
 4 | 
 5 | use Laravel\Nova\Nova;
 6 | use Laravel\Nova\Fields\ID;
 7 | use Illuminate\Http\Request;
 8 | use Laravel\Nova\Fields\Text;
 9 | use Illuminate\Validation\Rule;
10 | use Laravel\Nova\Fields\Select;
11 | use Laravel\Nova\Fields\DateTime;
12 | use Laravel\Nova\Fields\MorphToMany;
13 | use Laravel\Nova\Fields\BelongsToMany;
14 | use Spatie\Permission\PermissionRegistrar;
15 | 
16 | trait RoleResourceTrait
17 | {
18 | 	public static function getModel()
19 | 	{
20 | 		return app(PermissionRegistrar::class)->getRoleClass();
21 | 	}
22 | 
23 | 	/**
24 | 	 * Get the fields displayed by the resource.
25 | 	 *
26 | 	 * @param \Illuminate\Http\Request $request
27 | 	 *
28 | 	 * @return array
29 | 	 */
30 | 	public function fields(Request $request)
31 | 	{
32 | 		$guardOptions = collect(config('auth.guards'))->mapWithKeys(function ($value, $key) {
33 | 			return [$key => $key];
34 | 		});
35 | 
36 | 		$userResource = Nova::resourceForModel(getModelForGuard($this->guard_name));
37 | 
38 | 		$permissionResource = Nova::resourceForModel(app(PermissionRegistrar::class)->getPermissionClass());
39 | 
40 | 		return [
41 | 			ID::make()->sortable(),
42 | 
43 | 			Text::make(__('laravel-nova-permission::roles.name'), 'name')
44 | 				->rules(['required', 'string', 'max:255'])
45 | 				->creationRules('unique:' . config('permission.table_names.roles'))
46 | 				->updateRules('unique:' . config('permission.table_names.roles') . ',name,{{resourceId}}'),
47 | 
48 | 			Select::make(__('laravel-nova-permission::roles.guard_name'), 'guard_name')
49 | 				->options($guardOptions->toArray())
50 | 				->rules(['required', Rule::in($guardOptions)]),
51 | 
52 | 			DateTime::make(__('laravel-nova-permission::roles.created_at'), 'created_at')->exceptOnForms(),
53 | 
54 | 			DateTime::make(__('laravel-nova-permission::roles.updated_at'), 'updated_at')->exceptOnForms(),
55 | 
56 | 			BelongsToMany::make($permissionResource::label(), 'permissions', $permissionResource)->searchable(),
57 | 
58 | 			MorphToMany::make($userResource::label(), 'users', $userResource)->searchable(),
59 | 		];
60 | 	}
61 | }
62 | 


--------------------------------------------------------------------------------