Hide model fields based on user permissions

Question

Lets say user_one has permission to view purchase_price, and user_two does not have this permission.

I want to dynamically hide the purchase_price based on the user permission.

What I have done

I already managed the permissions using spatie package.

What I have tried and searched for

I have found that I could use the boot() function the model itself to hide certain fields but I don't know how or it is the best solution also it is a static function.
I could make a scope to handle what the API response using if statements and select() but I don't think this is a good solution too.
Also I could use Laravel resources.

Some codes please. No free & effortless consultancy is available here on SO. — Shudhansh Shekhar, Jun 27 '19 at 09:31
You don't need code to answer my question. I am asking about best practice in hiding some model fields from unauthorized users — AE1995, Jun 27 '19 at 09:47
Best practices I already shared in my solution but you need to read about them by your self. Because policies is a huge topic and can't explain everything at stack overflow. — Sahil Gupta, Jun 27 '19 at 17:34
So please read it and mark my solution correct if it works for you. — Sahil Gupta, Jun 27 '19 at 17:34

Sahil Gupta · Accepted Answer · 2019-06-27T09:59:47.523

1

You can create policies and after that use can() in the controller and @can in blade file for role filters. Click here for more information.

if ($this->getAuthorisedApp()->cannot('purchase_price'))
    {
        $this->setHidden(['purchase_price']);

        //  Or, $this->setVisible(['example_key']), if this works better for you.
    }

edited Jun 27 '19 at 09:59

answered Jun 27 '19 at 09:38

Sahil Gupta

578
5
16

I am asking about hiding some model fields for some permissions. – AE1995 Jun 27 '19 at 09:46
@Danny, You need to read about policies. You can manage everything from policies eg: Model, Controller, Blade, Middleware. They work everywhere. – Sahil Gupta Jun 27 '19 at 09:56
For more reference use this link:- https://laracasts.com/discuss/channels/laravel/hide-eloquent-fields-based-on-user-role-or-any-model – Sahil Gupta Jun 27 '19 at 10:00
I have created a policy and did as you tell me but I don't know how to fire that policy in the Model – AE1995 Jun 27 '19 at 10:49
Actually, I'm stuck somewhere. It's better if you can read yourself. Otherwise, I'll reply to you later. – Sahil Gupta Jun 27 '19 at 11:07
Sorry for the inconvenience. – Sahil Gupta Jun 27 '19 at 11:07

Hide model fields based on user permissions

1 Answers1