PHPFixing
  • Privacy Policy
  • TOS
  • Ask Question
  • Contact Us
  • Home
  • PHP
  • Programming
  • SQL Injection
  • Web3.0

Tuesday, April 19, 2022

[FIXED] how do I assign the defined permissions to the right policies and controller methods in Spatie/Laravel-permission?

 April 19, 2022     laravel, laravel-authorization, laravel-permission, php, policy     No comments   

Issue

This may seem a simple problem, but I could not find a solution either in Laravel policy documentation or in Spatie/Laravel-permission documentation.
Here is the problem:
This is how I've assigned permissions to certain roles in PermissionSeeder.php:

 public function run()
    {
        // Reset cached roles and permissions
        app()[PermissionRegistrar::class]->forgetCachedPermissions();

        // create permissions
        Permission::create(['name' => 'view own tickets']);
        Permission::create(['name' => 'view all tickets']);
        Permission::create(['name' => 'forward a ticket']);
        Permission::create(['name' => 'close a ticket']);
        Permission::create(['name' => 'write a ticket']);
        Permission::create(['name' => 'assign permissions to roles']);
        Permission::create(['name' => 'hide a ticket']);


        // create roles and assign existing permissions
        $role1 = Role::create(['name' => 'staff']);
        $role1->givePermissionTo('view own tickets');
        $role1->givePermissionTo('forward a ticket');
        $role1->givePermissionTo('close a ticket');
        $role1->givePermissionTo('write a ticket');

        $role2 = Role::create(['name' => 'admin']);
        $role2->givePermissionTo('view own tickets');
        $role2->givePermissionTo('forward a ticket');
        $role2->givePermissionTo('close a ticket');
        $role2->givePermissionTo('write a ticket');
        $role2->givePermissionTo('hide a ticket');
        $role2->givePermissionTo('view all tickets');

        $role3 = Role::create(['name' => 'Super-Admin']);
    }

Now let me give you an example of how my controller method for forwarding a method looks:

class TicketController extends Controller
{
    /**
     * forward a ticket to another user.
     *
     * @param Request $request
     * @return Response
     */
    public function forwardTo(Request $request)
    {
        $ticket = TicketTitle::find($request->ticket_id);
        $ticket->forwarded_to = $request->user_id;
        $ticket->status = TicketTitle::STATUS_FORWARDED;
        $ticket->save();
        return \response($ticket, 200);
    }
}

It is necessary to first verify that the user has the permission to forward a ticket before executing this method... Could you please explain how to do this?
If I have to define a policy, given the name of my method and my permission, what should the policy be called?
I also checked similar questions, but none of them had the answer I was looking for.


Solution

if(auth()->user()->hasPermissionTo('forward a ticket')){

  $ticket->forwarded_to = $request->user_id;

};

try this one.commit for further issues



Answered By - Muhammad Huzaifa
Answer Checked By - Candace Johnson (PHPFixing Volunteer)
  • Share This:  
  •  Facebook
  •  Twitter
  •  Stumble
  •  Digg
Newer Post Older Post Home

0 Comments:

Post a Comment

Note: Only a member of this blog may post a comment.

Total Pageviews

Featured Post

Why Learn PHP Programming

Why Learn PHP Programming A widely-used open source scripting language PHP is one of the most popular programming languages in the world. It...

Subscribe To

Posts
Atom
Posts
Comments
Atom
Comments

Copyright © PHPFixing