Why the Permissions Matrix not stored in db

[mshannaq]

As I can see the group permissions is stored in app/Config/AuthGroups.php in array $matrix

that mean the group permissions is static and only can be changed by updating the file AuthGroups.php. and this prevent the users from changing the group permissions unless they access the file system.

what if we need to give the ability to logged in super users to modify the group permissions? I think that require the group permissions to be stored in DB. is that correct?

[datamweb]

Shield uses the official library CodeIgniter 4 Settings.
So you can set your preferences using it.
Please read the library documentation .

[mshannaq]

Yes , I got it

I added the matrix array into the table settings using

example:

$matrix = [
        'superadmin' => [
            'admin.*',
            'users.*',
            'beta.*',
        ],
        'admin' => [
            'admin.access',
            'users.create',
            'users.edit',
            'users.delete',
            'beta.access',
        ],
        'developer' => [
            'admin.access',
            'admin.settings',
            'users.create',
            'users.edit',
            'beta.access',
        ],
        'user' => [],
        'beta' => [
            'beta.access',
        ],
    ];

service('settings')->set('AuthGroups.matrix', $matrix);

Then Shiled will take the permissions of the groups from the database instead of file system (while setting AuthGroups.matrix is exists on the settings table)

as it defined in

shield/src/Authorization/Traits/Authorizable.php

Lines 262 to 264 in b6d327d

	$matrix = function_exists('setting')
	? setting('AuthGroups.matrix')
	: config('AuthGroups')->matrix;