如何将定义的权限分配给 Spatie/Laravel-permission 中正确的策略和控制器方法?

发布于 2025-01-17 21:23:18 字数 2224 浏览 5 评论 0原文

这似乎是一个简单的问题,但是我在Laravel策略文档或Spatie/Laravel-permission文档中都找不到解决方案。
这是问题:
这就是我将权限分配给prisemenceSeeder.php中某些角色的方式:

 public function run()
    {
        // Reset cached roles and permissions
        app()[PermissionRegistrar::class]->forgetCachedPermissions();

        // create permissions
        Permission::create(['name' => 'view own tickets']);
        Permission::create(['name' => 'view all tickets']);
        Permission::create(['name' => 'forward a ticket']);
        Permission::create(['name' => 'close a ticket']);
        Permission::create(['name' => 'write a ticket']);
        Permission::create(['name' => 'assign permissions to roles']);
        Permission::create(['name' => 'hide a ticket']);


        // create roles and assign existing permissions
        $role1 = Role::create(['name' => 'staff']);
        $role1->givePermissionTo('view own tickets');
        $role1->givePermissionTo('forward a ticket');
        $role1->givePermissionTo('close a ticket');
        $role1->givePermissionTo('write a ticket');

        $role2 = Role::create(['name' => 'admin']);
        $role2->givePermissionTo('view own tickets');
        $role2->givePermissionTo('forward a ticket');
        $role2->givePermissionTo('close a ticket');
        $role2->givePermissionTo('write a ticket');
        $role2->givePermissionTo('hide a ticket');
        $role2->givePermissionTo('view all tickets');

        $role3 = Role::create(['name' => 'Super-Admin']);
    }

现在让我给您一个示例,说明如何转发方法的控制器方法外观:

class TicketController extends Controller
{
    /**
     * forward a ticket to another user.
     *
     * @param Request $request
     * @return Response
     */
    public function forwardTo(Request $request)
    {
        $ticket = TicketTitle::find($request->ticket_id);
        $ticket->forwarded_to = $request->user_id;
        $ticket->status = TicketTitle::STATUS_FORWARDED;
        $ticket->save();
        return \response($ticket, 200);
    }
}

有必要首先验证用户有权限以转发票证在执行此方法之前...您能解释一下如何执行此操作吗?
如果我必须定义一个策略,鉴于我的方法的名称和我的允许,该策略应称为什么?
我还检查了类似的问题,但是它们都没有我想要的答案。

This may seem a simple problem, but I could not find a solution either in Laravel policy documentation or in Spatie/Laravel-permission documentation.
Here is the problem:
This is how I've assigned permissions to certain roles in PermissionSeeder.php:

 public function run()
    {
        // Reset cached roles and permissions
        app()[PermissionRegistrar::class]->forgetCachedPermissions();

        // create permissions
        Permission::create(['name' => 'view own tickets']);
        Permission::create(['name' => 'view all tickets']);
        Permission::create(['name' => 'forward a ticket']);
        Permission::create(['name' => 'close a ticket']);
        Permission::create(['name' => 'write a ticket']);
        Permission::create(['name' => 'assign permissions to roles']);
        Permission::create(['name' => 'hide a ticket']);


        // create roles and assign existing permissions
        $role1 = Role::create(['name' => 'staff']);
        $role1->givePermissionTo('view own tickets');
        $role1->givePermissionTo('forward a ticket');
        $role1->givePermissionTo('close a ticket');
        $role1->givePermissionTo('write a ticket');

        $role2 = Role::create(['name' => 'admin']);
        $role2->givePermissionTo('view own tickets');
        $role2->givePermissionTo('forward a ticket');
        $role2->givePermissionTo('close a ticket');
        $role2->givePermissionTo('write a ticket');
        $role2->givePermissionTo('hide a ticket');
        $role2->givePermissionTo('view all tickets');

        $role3 = Role::create(['name' => 'Super-Admin']);
    }

Now let me give you an example of how my controller method for forwarding a method looks:

class TicketController extends Controller
{
    /**
     * forward a ticket to another user.
     *
     * @param Request $request
     * @return Response
     */
    public function forwardTo(Request $request)
    {
        $ticket = TicketTitle::find($request->ticket_id);
        $ticket->forwarded_to = $request->user_id;
        $ticket->status = TicketTitle::STATUS_FORWARDED;
        $ticket->save();
        return \response($ticket, 200);
    }
}

It is necessary to first verify that the user has the permission to forward a ticket before executing this method... Could you please explain how to do this?
If I have to define a policy, given the name of my method and my permission, what should the policy be called?
I also checked similar questions, but none of them had the answer I was looking for.

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(2

你是年少的欢喜 2025-01-24 21:23:18
if(auth()->user()->hasPermissionTo('forward a ticket')){

  $ticket->forwarded_to = $request->user_id;

};

尝试这个。提交更多问题

if(auth()->user()->hasPermissionTo('forward a ticket')){

  $ticket->forwarded_to = $request->user_id;

};

try this one.commit for further issues

情徒 2025-01-24 21:23:18

您可以从方法:有权使用如下:‌

$user->hasPermissionTo('edit articles')

You can from method: has Permission To Use as follows: ‌

$user->hasPermissionTo('edit articles')
~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文