MoonShine does not deviate from Laravel concepts and also uses Laravel policy for working with access rights.
In MoonShine resource controllers, each method will be checked for permissions.
If you encounter difficulties, refer to the official Laravel documentation.
By default, permission checks for resources are disabled.
To enable it, you need to add the $withPolicy property.
namespace App\MoonShine\Resources;
use MoonShine\Laravel\Resources\ModelResource;
class PostResource extends ModelResource
{
protected bool $withPolicy = true;
// ...
}
Available Policy methods:
viewAny - index page;
view - detail page;
create - creating a record;
update - editing a record;
delete - deleting a record;
massDelete - mass deletion of records;
restore - restoring a record after soft deletion;
forceDelete - permanent deletion of a record from the database.
// torchlight! {"summaryCollapsedIndicator": "namespaces"}
// [tl! collapse:5]
namespace App\Policies;
use App\Models\Post;
use Illuminate\Auth\Access\HandlesAuthorization;
use MoonShine\Laravel\Models\MoonshineUser;
class PostPolicy
{
use HandlesAuthorization;
public function viewAny(MoonshineUser $user)
{
return true;
}
public function view(MoonshineUser $user, Post $model)
{
return true;
}
public function create(MoonshineUser $user)
{
return true;
}
public function update(MoonshineUser $user, Post $model)
{
return true;
}
public function delete(MoonshineUser $user, Post $model)
{
return true;
}
public function restore(MoonshineUser $user, Post $model)
{
return true;
}
public function forceDelete(MoonshineUser $user, Post $model)
{
return true;
}
public function massDelete(MoonshineUser $user)
{
return true;
}
}
namespaces
namespaceApp\Policies;
useApp\Models\Post;
useIlluminate\Auth\Access\HandlesAuthorization;
useMoonShine\Laravel\Models\MoonshineUser;
classPostPolicy
{
useHandlesAuthorization;
publicfunctionviewAny(MoonshineUser $user)
{
returntrue;
}
publicfunctionview(MoonshineUser $user, Post $model)
{
returntrue;
}
publicfunctioncreate(MoonshineUser $user)
{
returntrue;
}
publicfunctionupdate(MoonshineUser $user, Post $model)
{
returntrue;
}
publicfunctiondelete(MoonshineUser $user, Post $model)
{
returntrue;
}
publicfunctionrestore(MoonshineUser $user, Post $model)
{
returntrue;
}
publicfunctionforceDelete(MoonshineUser $user, Post $model)
{
returntrue;
}
publicfunctionmassDelete(MoonshineUser $user)
{
returntrue;
}
}
namespace App\Policies;
use App\Models\Post;
use Illuminate\Auth\Access\HandlesAuthorization;
use MoonShine\Laravel\Models\MoonshineUser;
class PostPolicy
{
use HandlesAuthorization;
public function viewAny(MoonshineUser $user)
{
return true;
}
public function view(MoonshineUser $user, Post $model)
{
return true;
}
public function create(MoonshineUser $user)
{
return true;
}
public function update(MoonshineUser $user, Post $model)
{
return true;
}
public function delete(MoonshineUser $user, Post $model)
{
return true;
}
public function restore(MoonshineUser $user, Post $model)
{
return true;
}
public function forceDelete(MoonshineUser $user, Post $model)
{
return true;
}
public function massDelete(MoonshineUser $user)
{
return true;
}
}
You can create a Policy with a ready-made set of methods for MoonShine using the command moonshine:policy:
If you need to add additional authorization logic to your application or external package,
use the authorizationRules() method in AuthServiceProvider or MoonShineServiceProvider.
// torchlight! {"summaryCollapsedIndicator": "namespaces"}
// [tl! collapse:start]
namespace App\Providers;
use Illuminate\Database\Eloquent\Model;
use Illuminate\Support\ServiceProvider;
use MoonShine\Contracts\Core\DependencyInjection\ConfiguratorContract;
use MoonShine\Contracts\Core\DependencyInjection\CoreContract;
use MoonShine\Contracts\Core\ResourceContract;
use MoonShine\Laravel\DependencyInjection\ConfiguratorContract;
use MoonShine\Laravel\DependencyInjection\MoonShine;
use MoonShine\Laravel\DependencyInjection\MoonShineConfigurator;
use MoonShine\Laravel\Enums\Ability; // [tl! collapse:end]
class MoonShineServiceProvider extends ServiceProvider
{
/**
* @param MoonShine $core
* @param MoonShineConfigurator $config
*
*/
public function boot(
CoreContract $core,
ConfiguratorContract $config,
): void
{
$config->authorizationRules(
static function (ResourceContract $resource, Model $user, Ability $ability, Model $item): bool {
return true;
}
);
// ...
}
}
staticfunction (ResourceContract $resource, Model $user, Ability $ability, Model $item):bool {
returntrue;
}
);
// ...
}
}
namespace App\Providers;
use Illuminate\Database\Eloquent\Model;
use Illuminate\Support\ServiceProvider;
use MoonShine\Contracts\Core\DependencyInjection\ConfiguratorContract;
use MoonShine\Contracts\Core\DependencyInjection\CoreContract;
use MoonShine\Contracts\Core\ResourceContract;
use MoonShine\Laravel\DependencyInjection\ConfiguratorContract;
use MoonShine\Laravel\DependencyInjection\MoonShine;
use MoonShine\Laravel\DependencyInjection\MoonShineConfigurator;
use MoonShine\Laravel\Enums\Ability;
class MoonShineServiceProvider extends ServiceProvider
{
/**
* @param MoonShine $core
* @param MoonShineConfigurator $config
*
*/
public function boot(
CoreContract $core,
ConfiguratorContract $config,
): void
{
$config->authorizationRules(
static function (ResourceContract $resource, Model $user, Ability $ability, Model $item): bool {
return true;
}
);
// ...
}
}
