PHPackages                             alfaj/acl - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. alfaj/acl

ActiveLibrary

alfaj/acl
=========

Dynamically configurable access control management for laravel applications

24391[1 PRs](https://github.com/Alfaj38/acl/pulls)PHP

Since May 27Pushed 2y ago1 watchersCompare

[ Source](https://github.com/Alfaj38/acl)[ Packagist](https://packagist.org/packages/alfaj/acl)[ RSS](/packages/alfaj-acl/feed)WikiDiscussions master Synced 1w ago

READMEChangelogDependenciesVersions (1)Used By (0)

acl
===

[](#acl)

Dynamically configurable access control for Laravel applications..

### install

[](#install)

```
composer require alfaj/acl

```

### configure

[](#configure)

In your laravel config/app.php under providers add

```
Alfaj\Acl\AclServiceProvider::class
```

### publish

[](#publish)

```
php artisan vendor:publish

```

This command will publish view files inside `views/vendor/acl`, seed files inside the `databases/seed` and a config file `config/acl.php`.

### seed

[](#seed)

At your `DatabaseSeeder.php` under `database/seeds` add the following lines

```
$this->call(UserTableSeeder::class); //optional
$this->call(RoleTableSeeder::class);
$this->call(ResourceTableSeeder::class);
$this->call(PermissionTableSeeder::class);
$this->call(UserRoleTableSeeder::class);
```

NOTE: If you see any kind of class not found type error try running `composer dump-autoload`

### artisan

[](#artisan)

This library comes with an artisan command `acl:resource` to automatically create all the resources (*controller@action*) available in your project under `app/Http/Controllers` directory. To activate this command you need to add these following lines to your `app/Console/Kernel.php` file.

```
protected $commands = [
    \Alfaj\Acl\Commands\AclResource::class
];
```

### @annotation

[](#annotation)

Acl library now has two annotation support `@resource`, and `@allowRole` to be used with controller action

```
/**
* @resource('able to see home')
* @allowRole('Default, Admin')
*/
public function index()
{
    return view('home');
}
```

NOTE: by default **developer** role has the highest permission level, and it doesn't need to be mentioned in the `@allowRole` annotation. If you remove the `@allowRole` annotation it won't delete the permissions from the database, but if you change the role list in the annotation then it will update the databased accordingly.

### middleware

[](#middleware)

This ACL library comes with two middleware as shown below. `AuthenticateWithAcl` is the middleware you need. The other `ResourceMaker` middle ware is just a helper to create resource dynamically if it doesn't exists in the first place and assign permission for it to the `developer` role.

In your `kernal.php` file add this lines

```
'auth.acl' => \Alfaj\Acl\Middleware\AuthenticateWithAcl::class,
'resource.maker' => \Alfaj\Acl\Middleware\ResourceMaker::class,
```

In your `route/web.php` file add this lines

```
Route::group(['middleware' => ['resource.maker','auth.acl']], function () {
    Route::get('/home', 'HomeController@index');
});
```

*IMPORTANT*: `resource.maker` must have to be placed before `auth.acl`. In production you can remove `resource.maker` once you have all the resource generated.

### Role & Resource UI

[](#role--resource-ui)

To access role visit `YOUR-HOST/role` url

To access resource UI visit `YOUR-HOST/resource` url

### helpers

[](#helpers)

`has_access` checks for if a role has access to a specific controller action.

```
@if(has_access('User\UserController@getIndex'))
OR
@if(has_access('UserController@getIndex'))
```

`has_group_access` checks for if a role has access to a specific controller

```
@if(has_group_access(['User-User','User-Role','User-Resource']))
OR
@if(has_group_access('User-User'))
```

`@nullsafe()` checks for whether any of the object property is null or not in a fluent interface ($obj->prop->value), if the chain is broken it will simply return an empty string and prevent showing up `call to a member function of a non-object` exception.

Blade example:

```
{{ @nullsafe($obj->prop->value) }}
```

### Credit(Acknowledgement):

[](#creditacknowledgement)

Thanks to Mahbubul Hasan Uzzal for his "" package. This package is just an improvement of his codebase for laravel 6 applications and some additional features.

###  Health Score

19

—

LowBetter than 10% of packages

Maintenance20

Infrequent updates — may be unmaintained

Popularity20

Limited adoption so far

Community8

Small or concentrated contributor base

Maturity22

Early-stage or recently created project

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://www.gravatar.com/avatar/f4efb7be7ef5ceebe22caa7c49862bd7e409cdb38fc30dd4410f27c9695188e6?d=identicon)[Alfaj38](/maintainers/Alfaj38)

---

Top Contributors

[![Alfaj38](https://avatars.githubusercontent.com/u/6971822?v=4)](https://github.com/Alfaj38 "Alfaj38 (1 commits)")

### Embed Badge

![Health badge](/badges/alfaj-acl/health.svg)

```
[![Health](https://phpackages.com/badges/alfaj-acl/health.svg)](https://phpackages.com/packages/alfaj-acl)
```

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)