Multi guard auth

Author: atomjoy

database/seeders/PermissionsSeeder.php

@@ -14,64 +14,15 @@ class PermissionsSeeder extends Seeder
 	 */
 	public function run(): void
 	{
-		// Create all permissions
+		// Create permissions
 		$permissions = [
 			'super_admin_access',
 			'admin_access',
 			'worker_access',
 			'writer_access',
+			'user_access',
 			'login_access',
 			'password_access',
-			'permission_create',
-			'permission_edit',
-			'permission_show',
-			'permission_delete',
-			'permission_access',
-			'role_create',
-			'role_edit',
-			'role_show',
-			'role_delete',
-			'role_access',
-			'user_create',
-			'user_edit',
-			'user_show',
-			'user_delete',
-			'user_access',
-			'order_create',
-			'order_edit',
-			'order_show',
-			'order_delete',
-			'order_access',
-			'newsletter_create',
-			'newsletter_edit',
-			'newsletter_show',
-			'newsletter_delete',
-			'newsletter_access',
-			'article_create',
-			'article_edit',
-			'article_show',
-			'article_delete',
-			'article_access',
-			'article_category_create',
-			'article_category_edit',
-			'article_category_show',
-			'article_category_delete',
-			'article_category_access',
-			'article_comment_create',
-			'article_comment_edit',
-			'article_comment_show',
-			'article_comment_delete',
-			'article_comment_access',
-			'article_tag_create',
-			'article_tag_edit',
-			'article_tag_show',
-			'article_tag_delete',
-			'article_tag_access',
-			'profile_create',
-			'profile_edit',
-			'profile_show',
-			'profile_delete',
-			'profile_access',
 		];
 
 		foreach ($permissions as $permission) {
@@ -90,7 +41,8 @@ public function run(): void
 		// Gets all permissions via Gate::before rule
 		// in AuthServiceProvider or from Policy before method
 		$superadmin = Role::create([
-			'name' => 'super_admin', 'guard_name' => 'admin'
+			'name' => 'super_admin',
+			'guard_name' => 'admin'
 		]);
 
 		// Add permissions to role
@@ -99,110 +51,60 @@ public function run(): void
 			'admin_access',
 			'login_access',
 			'password_access',
-			'permission_create',
-			'permission_edit',
-			'permission_show',
-			'permission_delete',
-			'permission_access',
-			'role_create',
-			'role_edit',
-			'role_show',
-			'role_delete',
-			'role_access',
-			'user_create',
-			'user_edit',
-			'user_show',
-			'user_delete',
-			'user_access',
-			'order_create',
-			'order_edit',
-			'order_show',
-			'order_delete',
-			'order_access',
 		]);
 
 		// Admin role
 		$admin = Role::create([
-			'name' => 'admin', 'guard_name' => 'admin'
+			'name' => 'admin',
+			'guard_name' => 'admin'
 		]);
 
 		// Add permissions to role
 		$admin->givePermissionTo([
 			'admin_access',
 			'login_access',
 			'password_access',
-			'order_create',
-			'order_edit',
-			'order_show',
-			'order_delete',
-			'order_access',
-			'newsletter_create',
-			'newsletter_edit',
-			'newsletter_show',
-			'newsletter_delete',
-			'newsletter_access',
 		]);
 
 		// Worker role
 		$worker = Role::create([
-			'name' => 'worker', 'guard_name' => 'admin'
+			'name' => 'worker',
+			'guard_name' => 'admin'
 		]);
 
 		// Add permissions to role
 		$worker->givePermissionTo([
 			'worker_access',
 			'login_access',
 			'password_access',
-			'newsletter_create',
-			'newsletter_edit',
-			'newsletter_show',
-			'newsletter_delete',
-			'newsletter_access',
 		]);
 
 		// User role
 
 		// User role (guard web)
 		$user = Role::create([
-			'name' => 'user', 'guard_name' => 'web'
+			'name' => 'user',
+			'guard_name' => 'web'
 		]);
 
 		// Add permissions to role
 		$user->givePermissionTo([
+			'user_access',
 			'login_access',
 			'password_access',
-			'article_comment_create',
-			'article_comment_edit',
-			'article_comment_show',
-			'article_comment_delete',
-			'article_comment_access',
 		]);
 
 		// Writer role
 
 		// Writer role (guard web)
 		$user = Role::create([
-			'name' => 'writer', 'guard_name' => 'web'
+			'name' => 'writer',
+			'guard_name' => 'web'
 		]);
 
 		// Add permissions to role
 		$user->givePermissionTo([
 			'writer_access',
-			'article_create',
-			'article_edit',
-			'article_show',
-			'article_delete',
-			'article_access',
-			'article_category_create',
-			'article_category_edit',
-			'article_category_show',
-			'article_category_delete',
-			'article_category_access',
-			'article_tag_create',
-			'article_tag_edit',
-			'article_tag_show',
-			'article_tag_delete',
-			'article_tag_access',
 		]);
 	}
 

tests/Dev/F2aTest.php

@@ -126,6 +126,7 @@ function f2a_auth()
 					[
 						'name' => 'user',
 						'permissions' => [
+							['name' => 'user_access'],
 							['name' => 'login_access']
 						],
 					],

tests/Dev/LoggedTest.php

@@ -31,6 +31,7 @@ function check_is_user_logged()
 					[
 						'name' => 'user',
 						'permissions' => [
+							['name' => 'user_access'],
 							['name' => 'login_access']
 						],
 					],

tests/Dev/LoginTest.php

@@ -56,6 +56,7 @@ public function test_user_login(): void
 					[
 						'name' => 'user',
 						'permissions' => [
+							['name' => 'user_access'],
 							['name' => 'login_access']
 						],
 					],