如何让访问级别控制最简单？

Question

I am designing a CMS and i have setup users based on the role.How do i limit the users of their permissions based on their access level?

Answer 1

The easiest way is to get users by their role. Have a column for your users table called role or whatever you name it.

You can do Access Level Control easily with Gates

In your app\Providers\AuthServiceProvider register your policy. Example:

use Illuminate\Support\Facades\Gate;
use Illuminate\Contracts\Auth\Access\Gate as GateContract;

public function boot(GateContract $gate)
    {

        $this->registerPolicies($gate);

        $gate->define('isUser', function($user){
          return $user->role == 'user';
        });

        $gate->define('isDealer', function($user){
          return $user->role == 'dealer';
        });
    }

isUser , isDealer are the user Types we are defining to Use in the project blade,controllers.You can change it as you like.Role is the column that you created in the table and we are comparing with the table values which are the user types user and dealer.

you can limit values in blade with laravel method

@can('isUser')
<only visible to users based on role user>
@endcan

It will be still accessible via routes so you can limit via controller functions or routes.

//controller
public function create()
{
   if(!Gate::allows('isUser')){  // || for multiple parameters  can('isAdmin' || 'isUser)
            abort(404,"Abort");
   }
   return view('yourView');
}

This way the controller function will be not accessible for the roles defined. Check the official documentation for in detail methods and information.