Use php attributes to define each controller permission

[agus24]

i have a lot middleware inside my __construct() method on controller like this

public function __construct()
    {
        $this->middleware("permission:menu_index", ["only" => "index"]);
        $this->middleware("permission:menu_store", ["only" => "store"]);
        $this->middleware("permission:menu_update", ["only" => "update"]);
        $this->middleware("permission:menu_release", ["only" => "release"]);
    }

then i thought would it be good if each controller have each permission using php attributes?
something like this

#[Permission('menu_index')]
public function index() {
    ...
}

i dont know if this already supported by laravel or not.

thank you

[erikn69]

This package still supports php 7

laravel-permission/composer.json

Line 25 in 6a3ed62

"php" : "^7.3|^8.0|^8.1",

[layerok]

Here is how I impletemented this

<?php

namespace App\Attributes;

use Attribute;

#[Attribute]
class Permission
{
    public function __construct(public ?string $permission = null) {}
}

<?php

namespace App\Http\Controllers;

use App\Attributes\Permission;
use Illuminate\Routing\Controller as BaseController;

class Controller extends BaseController
{
    public function __construct()
    {
        $this->addPermissions();
    }

    public function addPermissions(): void
    {
        $classReflection = new \ReflectionClass($this);
        $methods = $classReflection->getMethods();
        foreach ($methods as $method) {
            $attributes = $method->getAttributes(Permission::class);
            foreach ($attributes as $attribute) {
                $instance = $attribute->newInstance();
                $middlewareName = "can:{$instance->permission}";
                $this->middleware($middlewareName)->only([$method->getName()]);
            }
        }
    }
}

<?php
namespace Modules\Contact\Http\Controllers;

use App\Attributes\Permission;
use App\Http\Controllers\Controller;

class ContactController extends Controller
{
    #[Permission('contact.index')]
    public function index()
    {
       // ....
    }
}