spatie/laravel-permission

Features

• Role-Based Access Control - Implements a full role-based access control system to group permissions into roles and assign them to users.
• Database-Backed RBAC - Provides a database-driven approach to storing and managing roles and permissions via many-to-many associations.
• Authorization Gates - Implements centralized authorization gates to evaluate if users possess the required permissions for specific actions.
• Access Control Guards - Provides route guards that block request execution based on required roles or permissions.
• Authorization Middleware - Integrates with Laravel's authorization gates and middleware to restrict access to routes and UI elements.
• Granular Permission Systems - Provides a framework for assigning granular, specific access rights to users and roles.
• Access Control and Authorization - Provides granular authorization to control exactly which specific actions or features a user can access.
• User Role Management - Provides mechanisms to associate users with specific roles to determine their overall capabilities.
• Permission Management - Enables the dynamic creation and updating of user roles and permissions via a database without modifying code.
• Request Guards - Provides middleware-based guards that validate user roles and permissions before allowing access to controller actions.
• Role-Based Access Control Systems - Functions as a comprehensive role-based access control package for Laravel applications.
• Web Application Security - Secures Laravel applications by implementing route guards and middleware to protect sensitive application areas.
• Application Permission Managers - Provides a database permissions manager for assigning specific abilities to users and roles.
• Wildcard Permission Matching - Features a wildcard system using pattern matching to grant broad access across multiple related permissions.
• Permission Wildcards - Implements a wildcard permission system using pattern matching to grant broad access across multiple related abilities.
• Data Caching - Utilizes a configurable caching system to store role and permission associations, reducing database overhead.
• Permission Caching - Implements a driver-based caching system to persist evaluated permission sets and optimize performance.
• Team-Scoped Access Control - Allows users to maintain different roles and permission levels across separate organizational contexts or teams.
• Domain-Scoped Permissions - Supports multi-tenant scoping so that roles and permissions are isolated within specific organizational teams.
• View-Level Verifications - Provides mechanisms to conditionally render UI elements based on the user's assigned roles or permissions.
• Wildcard - Implements a flexible authorization approach using wildcards to grant broad access across related permissions.
• Application Helpers - Manages users, roles, and permissions.
• Authentication and Authorization - Associates users with specific roles and permissions.

Star history