Laravel 9 Roles and permissions Examle; In this tutorial you will learn how to implement Roles & Permissions on Laravel 8, and 9 with a step-by-step guide that will help you to understand the flow.
Roles and permissions are a very important part of all web applications. User Roles are a useful way of allowing and controlling who can access your site. That’s why we need to implement role-based users with assigned permissions.
Now a days Spatie package is the best for roles and permissions which allows you to manage user permissions and roles in a database. Spatie provide how to assign role to user, how to assign different permissions to user and how to assign permissions to a assigned roles. Through roles and permissions you can create several types of users with different role and permission.
A permission is the right to access one or more system objects. A role is a group of permissions. Roles can be assigned to any user or user group, and a user or user group can have more than one role. Unlike hierarchical users, a role does not contain another role.
Step 1: Install Laravel App
First download the laravel application or you can use the roles and permission in the existing one.
composer create-project --prefer-dist laravel/laravel laravel-roles-permissionsStep 2: Make Authentication
Now create the make auth command here, if you are using laravel greater then >6 version then run below command to make auth
composer require laravel/ui --dev
php artisan ui vue --auth
npm install
npm run watchIf you are using below laravel less the <6 version then run below command to make auth
php artisan make:authStep 3: Install Spatie Package
Now install the spatie package for user roles and permission in laravel, run the following command in your terminal:
composer require spatie/laravel-permissionNow open config/app.php file and add the following provider.
config/app.php
'providers' => [ .... Spatie\Permission\PermissionServiceProvider::class, ],
Now we need to publish the spatie roles and persion using the following commands.
php artisan vendor:publish --provider="Spatie\Permission\PermissionServiceProvider"
Spatie create three migrations you can see after running the migration command:
php artisan migrate
Step 4: Add Middleware
Spatie package provide it’s in-built middleware that way we can use it simply and that is display as bellow. Now we need to update our roles and permission as a middleware in Kernel.php file something like below
app/Http/Kernel.php
protected $routeMiddleware = [
......
'role' => \Spatie\Permission\Middlewares\RoleMiddleware::class,
'permission' => \Spatie\Permission\Middlewares\PermissionMiddleware::class,
'role_or_permission' => \Spatie\Permission\Middlewares\RoleOrPermissionMiddleware::class,
]
Step 5: Create Model and Run Migration
Now create product model and migration file just run the following command. this command generate a product model and migration which you can see in same as below.
php artisan make:model Product -mUpdate Migration File:
Update the products migration file same as below.
database\migrations\2021_08_01_130515_create_products_table.php
<?php
use Illuminate\Database\Migrations\Migration;
use Illuminate\Database\Schema\Blueprint;
use Illuminate\Support\Facades\Schema;
class CreateProductsTable extends Migration
{
/**
* Run the migrations.
*
* @return void
*/
public function up()
{
Schema::create('products', function (Blueprint $table) {
$table->id();
$table->string('name')->nullable();
$table->string('description')->nullable();
$table->decimal('price')->nullable()->default(0.00);
$table->timestamps();
});
}
/**
* Reverse the migrations.
*
* @return void
*/
public function down()
{
Schema::dropIfExists('products');
}
}Add Fillable Property:
Open the Product model and add the fillable property.
app\Models\Product.php
<?php
namespace App\Models;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Database\Eloquent\Model;
class Product extends Model
{
use HasFactory;
protected $fillable = [
'name', 'description', 'price'
];
}Step 6: Update User Model
Open the user model and use the roles and permissions same as below.
app\Models\Product.php
<?php
namespace App\Models;
use Illuminate\Contracts\Auth\MustVerifyEmail;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Spatie\Permission\Traits\HasRoles;
use Spatie\Permission\Models\Role;
use Spatie\Permission\Models\Permission;
class User extends Authenticatable
{
use HasFactory, Notifiable, HasRoles;
/**
* The attributes that are mass assignable.
*
* @var array
*/
protected $fillable = [
'name', 'email', 'password',
];
/**
* The attributes that should be hidden for arrays.
*
* @var array
*/
protected $hidden = [
'password', 'remember_token',
];
/**
* The attributes that should be cast to native types.
*
* @var array
*/
protected $casts = [
'email_verified_at' => 'datetime',
];
}Step 7: Add Routes
After that all now we create all routes of roles, users, products and home as we give roles which user so he can see the user dashboar and if we give admin roles then he access the admin roles. let’s upate the below routes in your web.php file.
routes\web.php
<?php
use Illuminate\Support\Facades\Route;
use App\Http\Controllers\HomeController;
use App\Http\Controllers\RoleController;
use App\Http\Controllers\UserController;
use App\Http\Controllers\ProductController;
/*
|--------------------------------------------------------------------------
| Web Routes
|--------------------------------------------------------------------------
|
| Here is where you can register web routes for your application. These
| routes are loaded by the RouteServiceProvider within a group which
| contains the "web" middleware group. Now create something great!
|
*/
Route::get('/', function () {
return view('welcome');
});
Auth::routes();
Route::group(['middleware' => ['auth']], function() {
Route::resource('roles', RoleController::class);
Route::resource('users', UserController::class);
Route::resource('products', ProductController::class);
Route::get('home', [HomeController::class, 'index'])->name('home');
});Step 8: Create Controllers and Update Code
Here we are going to create and update all controllers which we are using here for roles and permission in laravel application.
First we create user controller for create and update user:
app/Http/Controllers/UserController.php
<?php
namespace App\Http\Controllers;
use Illuminate\Http\Request;
use App\Models\User;
use App\Models\Role;
use Illuminate\Support\Facades\Hash;
class UserController extends Controller
{
public function index()
{
$users = User::whereHas('roles', function($query){
$query->where('name', 'user');
})->get();
return view('admin.users.index', compact('users'));
}
public function create()
{
$roles = Role::get(['id', 'name']);
return view('admin.users.create', compact('roles'));
}
public function store(Request $request)
{
$user = User::create([
'name' => $request->name,
'email' => $request->email,
'password' => Hash::make($request->password),
]);
$user->assignRole($request->input('roles'));
return redirect()->route('users.index')->with('success', 'User created succssfully.');
}
public function show($id)
{
$user = User::find($id);
return view('admin.users.show',compact('user'));
}
public function edit($id)
{
$user = User::find($id);
$roles = Role::get(['id', 'name']);
$userRoles = $user->roles->pluck('id')->toArray();
return view('admin.users.edit', compact('user', 'roles', 'userRoles'));
}
public function update(Request $request)
{
$user = User::where('email', $request->email)->first();
$user->update(['name' => $request->name]);
$user->syncRoles($request->input('roles'));
return redirect()->route('users.index')->with('success', 'User updated succssfully.');
}
public function destroy($id)
{
User::find($id)->delete();
return redirect()->route('users.index')
->with('success','User deleted successfully');
}
}Here now you need to create the product controller and update the code just like below.
app\Http\Controllers\ProductController.php
<?php
namespace App\Http\Controllers;
use Illuminate\Http\Request;
use App\Models\Product;
class ProductController extends Controller
{
/**
* Display a listing of the resource.
*
* @return \Illuminate\Http\Response
*/
public function index()
{
$products = Product::all();
return view('products.index', compact('products'));
}
/**
* Show the form for creating a new resource.
*
* @return \Illuminate\Http\Response
*/
public function create()
{
return view('products.create');
}
/**
* Store a newly created resource in storage.
*
* @param \Illuminate\Http\Request $request
* @return \Illuminate\Http\Response
*/
public function store(Request $request)
{
$request->validate([
'name' => 'required',
'description' => 'required',
'price' => 'required'
]);
Product::create($request->all());
return redirect()->route('products.index')->with('success','Product created successfully.');
}
/**
* Display the specified resource.
*
* @param \App\Models\Product $products
* @return \Illuminate\Http\Response
*/
public function show(Product $product)
{
return view('products.show',compact('product'));
}
/**
* Show the form for editing the specified resource.
*
* @param \App\Models\Product $products
* @return \Illuminate\Http\Response
*/
public function edit(Product $product)
{
return view('products.edit', compact('product'));
}
/**
* Update the specified resource in storage.
*
* @param \Illuminate\Http\Request $request
* @param \App\Models\Product $products
* @return \Illuminate\Http\Response
*/
public function update(Request $request, Product $product)
{
$request->validate([
'name' => 'required',
'description' => 'required',
'price' => 'required'
]);
$product->update($request->all());
return redirect()->route('products.index')->with('success','Product updated successfully');
}
/**
* Remove the specified resource from storage.
*
* @param \App\Models\Product $products
* @return \Illuminate\Http\Response
*/
public function destroy(Product $product)
{
$product->delete();
return redirect()->route('products.index')
->with('success','products deleted successfully');
}
}Now we create role controller where from we can add custom roles and give the user roles and permission according our side.
Update the code in your role controller just like below:
app\Http\Controllers\RoleController.php
<?php
namespace App\Http\Controllers;
use Illuminate\Http\Request;
use Spatie\Permission\Models\Role;
use Spatie\Permission\Models\Permission;
use Spatie\Permission\Models\RoleHasPermission;
use DB;
class RoleController extends Controller
{
/**
* Display a listing of the resource.
*
* @return \Illuminate\Http\Response
*/
public function index()
{
$roles = Role::orderBy('id','DESC')->paginate(5);
return view('roles.index',compact('roles'));
}
/**
* Show the form for creating a new resource.
*
* @return \Illuminate\Http\Response
*/
public function create()
{
$permissions = Permission::all();
return view('roles.create',compact('permissions'));
}
/**
* Store a newly created resource in storage.
*
* @param \Illuminate\Http\Request $request
* @return \Illuminate\Http\Response
*/
public function store(Request $request)
{
$this->validate($request, [
'name' => 'required|unique:roles,name',
'permissions' => 'required',
]);
$role = Role::create(['name' => $request->input('name')]);
$role->syncPermissions($request->permissions);
return redirect()->route('roles.index')
->with('success','Role created successfully');
}
/**
* Display the specified resource.
*
* @param int $id
* @return \Illuminate\Http\Response
*/
public function show($id)
{
$role = Role::find($id);
$rolePermissions = Permission::join("role_has_permissions","role_has_permissions.permission_id","=","permissions.id")
->where("role_has_permissions.role_id",$id)
->get();
return view('roles.show',compact('role', 'rolePermissions'));
}
/**
* Show the form for editing the specified resource.
*
* @param int $id
* @return \Illuminate\Http\Response
*/
public function edit($id)
{
$role = Role::find($id);
$permissions = Permission::all();
$rolePermissions = DB::table("role_has_permissions")
->where("role_has_permissions.role_id",$id)
->pluck('role_has_permissions.permission_id','role_has_permissions.permission_id')
->all();
return view('roles.edit',compact('role','permissions', 'rolePermissions'));
}
/**
* Update the specified resource in storage.
*
* @param \Illuminate\Http\Request $request
* @param int $id
* @return \Illuminate\Http\Response
*/
public function update(Request $request, $id)
{
$this->validate($request, [
'name' => 'required',
'permissions' => 'required',
]);
$role = Role::find($id);
$role->name = $request->input('name');
$role->save();
$role->syncPermissions($request->input('permissions'));
return redirect()->route('roles.index')
->with('success','Role updated successfully');
}
/**
* Remove the specified resource from storage.
*
* @param int $id
* @return \Illuminate\Http\Response
*/
public function destroy($id)
{
Role::find($id)->delete();
return redirect()->route('roles.index')
->with('success','Role deleted successfully');
}
}Here the home controller is look like this, We are redireting the users for their roles according if the user if admin then we redirect then in admin dashboard and if the user is not admin then he/she show the user dashboard.
app\Http\Controllers\HomeController.php
<?php
namespace App\Http\Controllers;
use Illuminate\Http\Request;
use App\Models\User;
use Spatie\Permission\Models\Role;
use Spatie\Permission\Models\Permission;
use Spatie\Permission\Traits\HasRoles;
use Illuminate\Support\Facades\Auth;
class HomeController extends Controller
{
/**
* Create a new controller instance.
*
* @return void
*/
public function __construct()
{
$this->middleware('auth');
}
/**
* Show the application dashboard.
*
* @return \Illuminate\Contracts\Support\Renderable
*/
public function index()
{
if (Auth::user()->hasRole('admin')) {
return view('admin.dashbord');
} else {
return view('users.dashbord');
}
}
}Step 9: Create Blade Files
Now here in this step we create all our blade files.
Create thme Layoutes:
First we create the layouts app.blade.php file which we will extanded in all other files.
resources\views\layouts\app.blade.php
<!doctype html>
<html lang="{{ str_replace('_', '-', app()->getLocale()) }}">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="csrf-token" content="{{ csrf_token() }}">
<title>{{ config('app.name', 'Laravel') }}</title>
<script src="{{ asset('js/app.js') }}" defer></script>
<link rel="dns-prefetch" href="//fonts.gstatic.com">
<link href="https://fonts.googleapis.com/css?family=Nunito" rel="stylesheet">
<link href="{{ asset('css/app.css') }}" rel="stylesheet">
</head>
<body>
<div id="app">
<nav class="navbar navbar-expand-md navbar-light bg-white shadow-sm">
<div class="container">
<a class="navbar-brand" href="{{ url('/') }}">
{{ config('app.name', 'Laravel') }}
</a>
<button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarSupportedContent" aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="{{ __('Toggle navigation') }}">
<span class="navbar-toggler-icon"></span>
</button>
<div class="collapse navbar-collapse" id="navbarSupportedContent">
<ul class="navbar-nav mr-auto">
</ul>
<ul class="navbar-nav ml-auto">
@guest
@if (Route::has('login'))
<li class="nav-item">
<a class="nav-link" href="{{ route('login') }}">{{ __('Login') }}</a>
</li>
@endif
@if (Route::has('register'))
<li class="nav-item">
<a class="nav-link" href="{{ route('register') }}">{{ __('Register') }}</a>
</li>
@endif
@else
<li class="nav-item dropdown">
@if(Auth::user()->hasRole('admin'))
<li><a class="nav-link" href="{{ route('users.index') }}">Manage Users</a></li>
@endif
<li><a class="nav-link" href="{{ route('roles.index') }}">Manage Role</a></li>
<li><a class="nav-link" href="{{ route('products.index') }}">Manage Product</a></li>
<a id="navbarDropdown" class="nav-link dropdown-toggle" href="#" role="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false" v-pre>
{{ Auth::user()->name }}
</a>
<div class="dropdown-menu dropdown-menu-right" aria-labelledby="navbarDropdown">
<a class="dropdown-item" href="{{ route('logout') }}"
onclick="event.preventDefault();
document.getElementById('logout-form').submit();">
{{ __('Logout') }}
</a>
<form id="logout-form" action="{{ route('logout') }}" method="POST" class="d-none">
@csrf
</form>
</div>
</li>
@endguest
</ul>
</div>
</div>
</nav>
<main class="py-4">
@yield('content')
</main>
</div>
</body>
</html>Create Admin Dashbaord Blade File:
The below blade files show if the admin user logged in. We are redirecting the user ad per their roles, The below admin/dashboard file show only which user roles is admin.
resources\views\admin\dashbord.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row justify-content-center">
<div class="col-md-8">
<div class="card">
<div class="card-header">{{ __('Dashboard') }}</div>
<div class="card-body">
@if (session('status'))
<div class="alert alert-success" role="alert">
{{ session('status') }}
</div>
@endif
{{ __('Hello Super Admin You are logged in!') }}
</div>
</div>
</div>
</div>
</div>
@endsectionCreate User Dashbaord Blade File:
The blow dashboard file will show the user who have user role.
resources\views\users\dashbord.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row justify-content-center">
<div class="col-md-8">
<div class="card">
<div class="card-header">{{ __('Dashboard') }}</div>
<div class="card-body">
@if (session('status'))
<div class="alert alert-success" role="alert">
{{ session('status') }}
</div>
@endif
{{ __('User are logged in!') }}
</div>
</div>
</div>
</div>
</div>
@endsectionCreate User Blade Files:
Here we are creating the user listings, crate, edit and show blade files accordingly.
resources\views\admin\users\index.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row">
<div class="col-lg-12">
<div>
<h2 class="pull-left">Users Management</h2>
<a class="btn btn-success text-right" href="{{ route('users.create') }}"> Create New User</a>
</div>
</div>
</div>
<div class="row">
<div class="col-lg-12 margin-tb">
@if ($message = Session::get('success'))
<div class="alert alert-success">
<p>{{ $message }}</p>
</div>
@endif
<table class="table table-bordered">
<tr>
<th>No</th>
<th>Name</th>
<th>Email</th>
<th>Roles</th>
<th width="280px">Action</th>
</tr>
@foreach ($users as $key => $user)
<tr>
<td>{{ ++$key }}</td>
<td>{{ $user->name }}</td>
<td>{{ $user->email }}</td>
<td>
@if(!empty($user->getRoleNames()))
@foreach($user->getRoleNames() as $role)
<label class="badge badge-success">{{ $role }}</label>
@endforeach
@endif
</td>
<td>
<a class="btn btn-info" href="{{ route('users.show',$user->id) }}">Show</a>
<a class="btn btn-primary" href="{{ route('users.edit',$user->id) }}">Edit</a>
{!! Form::open(['method' => 'DELETE','route' => ['users.destroy', $user->id],'style'=>'display:inline']) !!}
{!! Form::submit('Delete', ['class' => 'btn btn-danger']) !!}
{!! Form::close() !!}
</td>
</tr>
@endforeach
</table>
</div>
</div>
</div>
@endsectionresources\views\admin\users\create.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row">
<div class="col-lg-12 margin-tb">
<h2 class="pull-left">Create New User</h2>
<a class="btn btn-primary pull-right" href="{{ route('users.index') }}"> Back</a>
</div>
</div>
<form method="post" action="{{ route('users.store') }}" >
@csrf
<div class="row">
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Name:</strong>
<input type="text" name="name" placeholder="Name" class="form-control">
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Email:</strong>
<input type="email" name="email" placeholder="Email" class="form-control">
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Password:</strong>
<input type="password" name="password" placeholder="Password" class="form-control">
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Confirm Password:</strong>
<input type="password" name="password_confirmation" placeholder="Confirm Password" class="form-control">
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Role:</strong>
<select class="custom-select custom-select-lg mb-3" name="roles[]" multiple>
<option selected>Select Role</option>
@foreach($roles as $role)
<option value="{{ $role->id }}"> {{ $role->name }} </option>
@endforeach
</select>
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12 text-center">
<button type="submit" class="btn btn-primary">Submit</button>
</div>
</div>
</form>
</div>
@endsection
resources\views\admin\users\edit.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row">
<div class="col-lg-12 margin-tb">
<div class="pull-left">
<h2>Update User</h2>
</div>
<div class="pull-right">
<a class="btn btn-primary" href="{{ route('users.index') }}"> Back</a>
</div>
</div>
</div>
<form method="post" action="{{ route('users.update', $user->id) }}" >
@method('put')
@csrf
<div class="row">
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Name:</strong>
<input type="text" name="name" placeholder="Name" class="form-control" value="{{ $user->name }}">
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Email:</strong>
<input type="email" name="email" placeholder="Email" class="form-control" readonly value="{{ $user->email }}">
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Role:</strong>
<select class="custom-select custom-select-lg mb-3" name="roles[]" multiple>
<option selected>Select Role</option>
@foreach($roles as $role)
<option value="{{ $role->id }}" @if(in_array($role->id, $userRoles) ) selected @endif> {{ $role->name }} </option>
@endforeach
</select>
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12 text-center">
<button type="submit" class="btn btn-primary">Update</button>
</div>
</div>
</form>
</div>
@endsection
resources\views\admin\users\show.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row">
<div class="col-lg-12 margin-tb">
<h2> Show User</h2>
<a class="btn btn-primary" href="{{ route('users.index') }}"> Back</a>
</div>
</div>
<div class="row">
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Name:</strong>
{{ $user->name }}
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Email:</strong>
{{ $user->email }}
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Roles:</strong>
@if(!empty($user->getRoleNames()))
@foreach($user->getRoleNames() as $role)
<label class="badge badge-success">{{ $role }}</label>
@endforeach
@endif
</div>
</div>
</div>
</div>
@endsectionNow create the products section all blade files just like below. Here we will create index, create, edit, show blade files as well just like below you can create and update something like below.
Create Products Blades
resources\views\products\index.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row">
<div class="col-lg-12 margin-tb">
<div class="pull-left">
<h2>Laravel 8 CRUD Example with resource Controller </h2>
</div>
<div class="pull-right">
<a class="btn btn-success" href="{{ route('products.create') }}"> Add New </a>
</div>
</div>
</div>
@if ($message = Session::get('success'))
<div class="alert alert-success">
<p>{{ $message }}</p>
</div>
@endif
<table class="table table-bordered">
<tr>
<th>Name</th>
<th>Description</th>
<th>Price</th>
</tr>
@foreach ($products as $product)
<tr>
<td>{{ $product->name }}</td>
<td>{{ $product->description }}</td>
<td>{{ $product->price }}</td>
<td>
<a class="btn btn-info" href="{{ route('products.show',$product->id) }}">Show</a>
<a class="btn btn-primary" href="{{ route('products.edit',$product->id) }}">Edit</a>
<form action="{{ route('products.destroy',$product->id) }}" method="POST">
@csrf
@method('DELETE')
<button type="submit" class="btn btn-danger">Delete</button>
</form>
</td>
</tr>
@endforeach
</table>
</div>
@endsection
resources\views\products\edit.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row">
<div class="col-lg-12 margin-tb">
<div class="pull-left">
<h2>Edit Produc</h2>
</div>
<div class="pull-right">
<a class="btn btn-primary" href="{{ route('products.index') }}"> Back</a>
</div>
</div>
</div>
@if ($errors->any())
<div class="alert alert-danger">
<ul>
@foreach ($errors->all() as $error)
<li>{{ $error }}</li>
@endforeach
</ul>
</div>
@endif
<form action="{{ route('products.update', $product->id) }}" method="POST">
@csrf
@method('PUT')
<div class="row">
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Name:</strong>
<input type="text" name="name" value="{{ $product->name }}" class="form-control" placeholder="Name">
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Description:</strong>
<textarea class="form-control" rows="5" name="description" placeholder="Description">{{ $product->description }}</textarea>
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Price:</strong>
<input type="number" name="price" value="{{ $product->price }}" class="form-control" placeholder="Price">
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12 text-center">
<button type="submit" class="btn btn-primary">Submit</button>
</div>
</div>
</form>
</div>
@endsectionresources\views\products\show.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row">
<div class="col-lg-12 margin-tb">
<div class="pull-left">
<h2> Show Product</h2>
</div>
<div class="pull-right">
<a class="btn btn-primary text-right" href="{{ route('products.index') }}"> Back</a>
</div>
</div>
</div>
<div class="row">
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Name:</strong>
{{ $product->title }}
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Description:</strong>
{{ $product->description }}
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Price:</strong>
{{ $product->price }}
</div>
</div>
</div>
</div>
@endsectionCreate Roles and Permissions Blade Files
Now in this section we will create the roles and permissions blade files same as above.
resources\views\roles\index.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row">
<div class="col-lg-12">
<div>
<h2 class="pull-left">Roles Management</h2>
@can('role-create')
<a class="btn btn-success text-right" href="{{ route('roles.create') }}"> Create New Role</a>
@endcan
</div>
</div>
</div>
<div class="row">
<div class="col-lg-12 margin-tb">
@if ($message = Session::get('success'))
<div class="alert alert-success">
<p>{{ $message }}</p>
</div>
@endif
<table class="table table-bordered">
<tr>
<th></th>
<th>Name</th>
<th>Action</th>
</tr>
@foreach ($roles as $key => $role)
<tr>
<td>{{ $key+1 }}</td>
<td>{{ $role->name }}</td>
<td>
<a class="btn btn-info" href="{{ route('roles.show',$role->id) }}">Show</a>
@can('role-edit')
<a class="btn btn-primary" href="{{ route('roles.edit',$role->id) }}">Edit</a>
@endcan
@can('role-delete')
{!! Form::open(['method' => 'DELETE','route' => ['roles.destroy', $role->id],'style'=>'display:inline']) !!}
{!! Form::submit('Delete', ['class' => 'btn btn-danger']) !!}
{!! Form::close() !!}
@endcan
</td>
</tr>
@endforeach
</table>
</div>
</div>
</div>
@endsectionresources\views\roles\create.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row">
<div class="col-lg-12 margin-tb">
<h2 class="pull-left">Create New Role</h2>
<a class="btn btn-primary pull-right" href="{{ route('roles.index') }}"> Back</a>
</div>
</div>
@if ($errors->any())
<div class="alert alert-danger">
<ul>
@foreach ($errors->all() as $error)
<li>{{ $error }}</li>
@endforeach
</ul>
</div>
@endif
<form method="post" action="{{ route('roles.store') }}" >
@csrf
<div class="row">
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Name:</strong>
<input type="text" name="name" placeholder="Name" class="form-control">
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Permission:</strong>
<select class="custom-select custom-select-lg mb-3" name="permissions[]" multiple>
<option selected>Select Permission</option>
@foreach($permissions as $permission)
<option value="{{ $permission->id }}"> {{ $permission->name }} </option>
@endforeach
</select>
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12 text-center">
<button type="submit" class="btn btn-primary">Save</button>
</div>
</div>
</form>
</div>
@endsectionresources\views\roles\edit.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row">
<div class="col-lg-12 margin-tb">
<h2 class="pull-left">Update Role</h2>
<a class="btn btn-primary pull-right" href="{{ route('roles.index') }}"> Back</a>
</div>
</div>
<form method="post" action="{{ route('roles.update', $role->id) }}" >
@method('put')
@csrf
<div class="row">
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Name:</strong>
<input type="text" name="name" placeholder="Name" class="form-control" value="{{ $role->name }}">
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Permission:</strong>
<select class="custom-select custom-select-lg mb-3" name="permissions[]" multiple>
<option selected>Select Permission</option>
@foreach($permissions as $permission)
<option value="{{ $permission->id }}" @if(in_array($permission->id, $rolePermissions) ) selected @endif> {{ $permission->name }} </option>
@endforeach
</select>
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12 text-center">
<button type="submit" class="btn btn-primary">Update</button>
</div>
</div>
</form>
</div>
@endsectionresources\views\roles\show.blade.php
@extends('layouts.app')
@section('content')
<div class="container">
<div class="row">
<div class="col-lg-12 margin-tb">
<h2> Show Role</h2>
<a class="btn btn-primary" href="{{ route('roles.index') }}"> Back</a>
</div>
</div>
<div class="row">
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Name:</strong>
{{ $role->name }}
</div>
</div>
<div class="col-xs-12 col-sm-12 col-md-12">
<div class="form-group">
<strong>Permissions:</strong>
@if(!empty($rolePermissions))
@foreach($rolePermissions as $permission)
<label class="label label-success">{{ $permission->name }},</label>
@endforeach
@endif
</div>
</div>
</div>
</div>
@endsectionStep 10: Create Seeder for User Roles and Permissions
Now in the last step we will create the seeder for dummy records and update the roles for exiting user which we want we can give the permission as well.
First we will create the roles seeder here, You need to create a new seeder RolesSeeder and udpate the below code on it.
php artisan make:seeder RolesSeederOpen the file and update the code just like below.
database\seeders\RolesSeeder.php
<?php
namespace Database\Seeders;
use Spatie\Permission\Models\Role;
use Illuminate\Database\Seeder;
class RolesSeeder extends Seeder
{
/**
* Run the database seeds.
*
* @return void
*/
public function run()
{
$roles = [ 'admin', 'user' ];
foreach ($roles as $role) {
Role::create([
'name' => $role,
'guard_name' => 'web'
]);
}
}
}After creating the roles seeder now run seed using the following command.
php artisan db:seed --class=RoleSeederCreate the permissions table seed you need to run the below command
php artisan make:seeder PermissionSeederNow update the below code the PermissionSeeder file.
database\seeders\PermissionSeeder.php
<?php
namespace Database\Seeders;
use Illuminate\Database\Seeder;
use Spatie\Permission\Models\Permission;
class PermissionSeeder extends Seeder
{
/**
* Run the database seeds.
*
* @return void
*/
public function run()
{
$permissions = [
'role-list',
'role-create',
'role-edit',
'role-delete',
'product-list',
'product-create',
'product-edit',
'product-delete'
];
foreach ($permissions as $permission) {
Permission::create(['name' => $permission]);
}
}
}After updating the code in permission table run the following command for generating dummy records on permissions table.
php artisan db:seed --class=PermissionSeederCreate the UserSeeder and update the code just like below.
php artisan make:seeder UserSeederAfter that update the code in your seeder file.
database\seeders\UserSeeder.php
<?php
namespace Database\Seeders;
use Illuminate\Database\Seeder;
use Illuminate\Support\Facades\Hash;
use App\Models\User;
use Spatie\Permission\Models\Role;
use Spatie\Permission\Models\Permission;
use Carbon\Carbon;
use Illuminate\Support\Facades\DB;
use Spatie\Permission\Traits\HasRoles;
class UserSeeder extends Seeder
{
/**
* Run the database seeds.
*
* @return void
*/
public function run()
{
$users = [
[
'email' => 'admin@testmail.com',
'name' => 'Super Admin',
'password' => Hash::make('12345678'),
'role' => 'admin'
],
[
'email' => 'user@testmail.com',
'name' => 'Test User',
'password' => Hash::make('12345678'),
'role' => 'user'
],
];
$role = new Role;
foreach ($users as $key => $user) {
$newUser = User::updateOrCreate([
'email' => $user['email']
], [
'name' => $user['name'],
'password' => $user['password']
]);
if ($newUser->id == 1) {
$role = $role->updateOrCreate(['name' => 'admin']);
} else {
$role = $role->updateOrCreate(['name' => 'user']);
}
$permissions = Permission::pluck('id')->toArray();
$role->syncPermissions($permissions);
$newUser->assignRole([$role->id]);
}
}
}Run the below commands for generating the dummy records in user table.
php artisan db:seed --class=UserSeederNow the laravel user roles and permission example is completed and we run the project via the following commad and check all our requirements.
php artisan serveOpen in browser
http://localhost:8000/
Login your app using following credential:
Email: admin@testmail.com
Password: 12345678Clone from GitHub: Laravel-Roles-and-Permissions
I hope you enjoy with laravel user roles and permissions tutorial with example, If any question and suggestion please comment us.
Exactly what I needed, you are too much. Thank you.