php artisan make:migration create_permissions_and_roles --create=permissions

public function up()
{
Schema::create("roles", function (Blueprint $table) {
$table->increments("id");
$table->string("name");
$table->string("label");
$table->string("description")->nullable();
$table->timestamps();
});
Schema::create("permissions", function (Blueprint $table) {
$table->increments("id");
$table->string("name");
$table->string("label");
$table->string("description")->nullable();
$table->timestamps();
});
Schema::create("permission_role", function (Blueprint $table) {
$table->integer("permission_id")->unsigned();
$table->integer("role_id")->unsigned();
$table->foreign("permission_id")
->references("id")
->on("permissions")
->onDelete("cascade");
$table->foreign("role_id")
->references("id")
->on("roles")
->onDelete("cascade");
$table->primary(["permission_id", "role_id"]);
});
Schema::create("role_user", function (Blueprint $table) {
$table->integer("user_id")->unsigned();
$table->integer("role_id")->unsigned();
$table->foreign("role_id")
->references("id")
->on("roles")
->onDelete("cascade");
$table->foreign("user_id")
->references("id")
->on("users")
->onDelete("cascade");
$table->primary(["role_id", "user_id"]);
});
}
public function down()
{
Schema::drop("roles");
Schema::drop("permissions");
Schema::drop("permission_role");
Schema::drop("role_user");
}

php artisan make:model Permission
php artisan make:model Role

// Permissions.php
public function roles()
{
return $this->belongsToMany(Role::class);
}
 

// Role.php
public function permissions()
{
return $this->belongsToMany(Permission::class);
}
//给角色添加权限
public function givePermissionTo($permission)
{
return $this->permissions()->save($permission);
}
 

// User.php
public function roles()
{
return $this->belongsToMany(Role::class);
}
// 判断用户是否具有某个角色
public function hasRole($role)
{
if (is_string($role)) {
return $this->roles->contains("name", $role);
}
return !! $role->intersect($this->roles)->count();
}
// 判断用户是否具有某权限
public function hasPermission($permission)
{
return $this->hasRole($permission->roles);
}
// 给用户分配角色
public function assignRole($role)
{
return $this->roles()->save(
Role::whereName($role)->firstOrFail()
);
}

public function boot(GateContract $gate)
{
parent::registerPolicies($gate);
$permissiOns= AppPermission::with("roles")->get();
foreach ($permissions as $permission) {
$gate->define($permission->name, function($user) use ($permission) {
return $user->hasPermission($permission);
});
}
}

php artisan tinker

// 改变命名空间位置，避免下面每次都要输入 App
namespace App
// 创建权限
$permission_edit = new Permission
$permission_edit->name = "edit-post"
$permission_edit->label = "Can edit post"
$permission_edit->save()
$permission_delete = new Permission
$permission_delete->name = "delete-post"
$permission_delete->label = "Can delete post"
$permission_delete->save()
// 创建角色
$role_editor = new Role
$role_editor->name = "editor";
$role_editor->label = "The editor of the site";
$role_editor->save()
$role_editor->givePermissionTo($permission_edit)
$role_admin = new Role
$role_admin->name = "admin";
$role_admin->label = "The admin of the site";
$role_admin->save()
// 给角色分配权限
$role_admin->givePermissionTo($permission_edit)
$role_admin->givePermissionTo($permission_delete)
// 创建用户
$editor = factory(User::class)->create()
// 给用户分配角色
$editor->assignRole($role_editor->name)
$admin = factory(User::class)->create()
$admin->assignRole($role_admin->name)

Route::get("/", function () {
$user = Auth::loginUsingId(1);
return view("welcome");
})

权限测试

@can("edit-post")
Edit Post
@endcan


@can("delete-post")
Delete Post
@endcan