Get expert guidance in a few days with a Laravel code review

Lightweight Access Control Management for Laravel with Porter

Last updated on by

Lightweight Access Control Management for Laravel with Porter image

Porter is a lightweight, blazing-fast Laravel role-based access control package created by Hassan Ibrahim, which treats roles as domain business logic rather than database abstractions. Hassan built this for developers who value simplicity, performance, and a clean architecture.

Porter's core concept emphasises that any model can be considered Assignable or Roleable, and the Roster then defines the access control relationship between them.

Features

  • Assignment-Focused Design: Treats roles as business assignments with contextual logic
  • Individual Role Classes: Each role is its own focused class extending the BaseRole
  • Ultra-Minimal Architecture: Just three core components for assignment management
  • Blazing Performance: Optimised for speed with minimal database interaction and built-in caching
  • Enhanced Security: Assignment keys encrypted with Laravel's built-in encryption
  • Automatic RoleCast: Seamless conversion between database keys and type-safe RoleContract instances
  • Perfect Laravel Integration: Custom Blade directives, middleware, plus seamless Gates and Policies

Basic Example

use Hdaklue\Porter\Facades\Porter;
 
// Assign a role
Porter::assign($user, $project, 'admin');
 
// Check the user's role
$isAdmin = $user->hasRoleOn($project, 'admin');
 
// Remove a role
Porter::remove($user, $project);
 
// Change the role
Porter::changeRoleOn($user, $project, 'editor');

Porter also provides an interactive Artisan command that allows you to create role classes.

php artisan porter:create

An example role class might look like:

use App\Porter\BaseRole; // Your application's base role
 
final class AssistantRegionalManager extends BaseRole
{
public function getName(): string
{
return 'assistant_regional_manager';
}
 
public function getLevel(): int
{
return 8;
}
 
public function getDescription(): string
{
return "The beet-loving, karate-chopping, all-around office superhero we didn't know we needed";
}
}

You can also integrate this with your Laravel models with the CanBeAssignedToEntity and ReceivesRoleAssignments traits:

use Hdaklue\Porter\Concerns\{CanBeAssignedToEntity, ReceivesRoleAssignments};
 
class User extends Authenticatable
{
use CanBeAssignedToEntity;
 
// Your existing User model code...
}
 
class Project extends Model
{
use ReceivesRoleAssignments;
 
// Your existing Project model code...
}

As of this writing, Porter is still relatively new, and Hassan is keen to get input and some additional help from the community with some other potential features.

To learn more about this package, contribute to it, and view the source code. You can find the repository on GitHub.

Yannick Lyn Fatt photo

Staff Writer at Laravel News and Full stack web developer.

Cube

Laravel Newsletter

Join 40k+ other developers and never miss out on new tips, tutorials, and more.

image
Laravel Cloud

Easily create and manage your servers and deploy your Laravel applications in seconds.

Visit Laravel Cloud
Tinkerwell logo

Tinkerwell

The must-have code runner for Laravel developers. Tinker with AI, autocompletion and instant feedback on local and production environments.

Tinkerwell
Get expert guidance in a few days with a Laravel code review logo

Get expert guidance in a few days with a Laravel code review

Expert code review! Get clear, practical feedback from two Laravel devs with 10+ years of experience helping teams build better apps.

Get expert guidance in a few days with a Laravel code review
PhpStorm logo

PhpStorm

The go-to PHP IDE with extensive out-of-the-box support for Laravel and its ecosystem.

PhpStorm
Laravel Cloud logo

Laravel Cloud

Easily create and manage your servers and deploy your Laravel applications in seconds.

Laravel Cloud
Acquaint Softtech logo

Acquaint Softtech

Acquaint Softtech offers AI-ready Laravel developers who onboard in 48 hours at $3000/Month with no lengthy sales process and a 100 percent money-back guarantee.

Acquaint Softtech
Kirschbaum logo

Kirschbaum

Providing innovation and stability to ensure your web application succeeds.

Kirschbaum
Shift logo

Shift

Running an old Laravel version? Instant, automated Laravel upgrades and code modernization to keep your applications fresh.

Shift
Harpoon: Next generation time tracking and invoicing logo

Harpoon: Next generation time tracking and invoicing

The next generation time-tracking and billing software that helps your agency plan and forecast a profitable future.

Harpoon: Next generation time tracking and invoicing
Lucky Media logo

Lucky Media

Get Lucky Now - the ideal choice for Laravel Development, with over a decade of experience!

Lucky Media
SaaSykit: Laravel SaaS Starter Kit logo

SaaSykit: Laravel SaaS Starter Kit

SaaSykit is a Multi-tenant Laravel SaaS Starter Kit that comes with all features required to run a modern SaaS. Payments, Beautiful Checkout, Admin Panel, User dashboard, Auth, Ready Components, Stats, Blog, Docs and more.

SaaSykit: Laravel SaaS Starter Kit
MongoDB logo

MongoDB

Enhance your PHP applications with the powerful integration of MongoDB and Laravel, empowering developers to build applications with ease and efficiency. Support transactional, search, analytics and mobile use cases while using the familiar Eloquent APIs. Discover how MongoDB's flexible, modern database can transform your Laravel applications.

MongoDB

The latest

View all →
Laravel Starter Kits Now Include Toast Notifications image

Laravel Starter Kits Now Include Toast Notifications

Read article
Ship AI with Laravel: Stop Your AI Agent from Guessing image

Ship AI with Laravel: Stop Your AI Agent from Guessing

Read article
Laravel Cloud Adds Path Blocking to Prevent Bots From Waking Hibernated Apps image

Laravel Cloud Adds Path Blocking to Prevent Bots From Waking Hibernated Apps

Read article
Making Laravel MongoDB Operations Idempotent: Safe Retries for Financial Transactions image

Making Laravel MongoDB Operations Idempotent: Safe Retries for Financial Transactions

Read article
FormRequest Strict Mode and Queue Job Inspection in Laravel 13.4.0 image

FormRequest Strict Mode and Queue Job Inspection in Laravel 13.4.0

Read article
Pretty PHP Info: A Modern Replacement for `phpinfo()` image

Pretty PHP Info: A Modern Replacement for `phpinfo()`

Read article