HasRoles

Build a partition-aware belongs-to-many relation.

Build a partition-aware morph-to-many relation.

Build the related query using the relation's captured partition.

Ensure a partition-bearing relation parent belongs to the captured partition.

Apply the captured partition to pivot reads and writes.

Get the permission registrar.

Get the event dispatcher.

Boot permission cleanup and queued assignment handling.

Delete the model and its permission assignments atomically.

Determine whether deleting the model removes permission assignments.

Delete one kind of assignment for a hard-deleted subject.

Delete assignment pivots owned by a Role or Permission record.

Resolve and validate a permission record's deletion partition.

Get the permission model class.

Get the wildcard permission class.

A model may have multiple direct permissions.

Build the direct permission assignment relation for a captured context.

Get the immutable context captured by a permission assignment relation.

Forget an assignment relation loaded for an earlier context.

Get cached direct permission assignments for this model.

Get direct permissions for a model-returning public API.

Return allowed direct permissions.

Scope the model query to certain permissions only.

Add an effective permission predicate for the given permission ids.

Add a permission-effect predicate for direct and role-granted permissions.

Add a direct permission-effect predicate.

Add a role permission-effect predicate.

Scope the model query to only those without certain permissions, whether indirectly by role or by direct permission.

Convert the given permissions to permission models.

Find a permission.

Determine if the model may perform the given permission.

Validates a wildcard permission against all permissions of a user.

An alias to hasPermissionTo(), but avoids throwing an exception.

Determine if the model has any of the given permissions.

Determine if the model has all of the given permissions.

Determine if the model has, via roles, the given permission.

Determine if the model has the given permission.

Return all the permissions the model has via roles.

Return all the permissions the model has, both directly and via roles.

Return all the permissions the model is denied, both directly and via roles.

Grant the given permission(s) to the model.

Deny the given permission(s) for the model.

Build a collision-safe assignment ID identity.

Index assignment IDs by their collision-safe identities.

Normalize an ID read directly from an assignment pivot.

Read current assignment pivots through their captured relation constraints.

Queue permission assignments until the model is saved.

Queuing a permission again replaces its queued effect.

Remove permission assignments queued for a captured context.

Flush all assignments queued before the model was saved.

Insert queued permission assignments, with one insert per context and effect.

Dispatch the permission attached event when enabled and listened for.

Determine whether the permission attached event has listeners.

Forget the wildcard permission index.

Remove all current permissions and set the given ones.

Remove all current permissions and set allowed and denied permissions.

For unsaved models, assignments are queued until the model is saved and the returned change set is empty because no database rows are changed yet.

Revoke the given permission(s).

Dispatch the permission detached event when enabled and listened for.

Determine whether the permission detached event has listeners.

Determine if the model has an explicit denied direct permission.

Determine if the model has an explicit denied permission via roles.

Return permissions granted through the model's roles with role-permission pivot data.

Load permissions granted through the model's roles with role-permission pivot data.

Resolve a permission for matching without throwing.

Build lookup keys for denied permissions.

Build a permission comparison key.

Clone a permission with the matching role-permission pivot.

Determine if a hydrated pivot marks the permission as denied.

Normalize a permission assignment effect.

Get a hydrated relation collection.

Determine if a stored permission matches an input permission.

Resolve the guard to use when matching stored permissions.

Get the permission names.

Get the stored permission models for the given permissions.

Ensure the given role or permission uses one of the model's guards.

Get the guard names for the model.

Get the default guard name for the model.

Forget the cached permissions.

Check if the model has All of the requested Direct permissions.

Check if the model has Any of the requested Direct permissions.

Boot role cleanup.

Get the role model class.

A model may have multiple roles.

Build the role assignment relation for a captured context.

Get cached role assignments for this model.

Scope the model query to certain roles only.

Scope the model query to only those without certain roles.

A model may be part of multiple teams.

When the teams feature is disabled this returns an empty BelongsToMany so tooling that introspects model relations (e.g. ide-helper:models) does not break. Querying it is a no-op and produces no rows.

Scope the model query to certain teams only.

Scope the model query to those without certain teams.

Assign the given role to the model.

Queue role assignments until the model is saved.

Replace role assignments queued for a captured context.

Remove role assignments queued for a captured context.

Dispatch the role attached event when enabled and listened for.

Determine whether the role attached event has listeners.

Revoke the given role from the model.

Dispatch the role detached event when enabled and listened for.

Determine whether the role detached event has listeners.

Remove all current roles and set the given ones.

Determine if the model has (one of) the given role(s).

Determine if the model has any of the given role(s).

Alias to hasRole() but without Guard controls

Determine if the model has all of the given role(s).

Determine if the model has exactly all of the given role(s).

Return allowed permissions directly assigned to the model.

Get the role names.

Get a stored role instance.

Convert a pipe-delimited role string to an array.