Laravel Variable Use In Every View

Question

I want to make sure this two is connecting with a variable. Which the variable determine during login: ROLE. The user will only can view information who work under them only.

LoginController.php

protected function authenticated($request, $user)
{ 
    if($user->role == 'workers') {

       $this->redirectTo = ('/home');
    } else if($user->role == 'manager') {

       $this->redirectTo = ('/welcome');
    } else {//($user->role = 'admin')

      $this->redirectTo = ('/dashboard');
    }

    return redirect()->intended($this->redirectPath());
}

AttendanceController.php

class AttendanceViewController extends Controller
{
    protected function index()
    {
       $attendance1 = DB::select('select * from attendance where line_num = "$role"');

       return view('attendanceview',['attendance1'=>$attendance1]);
    }
}

I have tried the suggestion from our friends: Session & Authorization it seems to work but it does not appear the information that I want in the AttendanceController.

You really should use authorization techniques, like policies, not global variables — Devon Bessemer
– Devon Bessemer, Commented Nov 30, 2018 at 3:25
Maybe i misinterpret my question. Now i have no problem when login to redirect to the intended page. Problem i'm facing here is on each view.blade, it only appear data related. Example: Table1: Users->role->chicken, Table2: Class->Dancetype->chicken, goat, cow. So when i login as Chicken, i only can view Dancetype-> chicken — A.nia
– A.nia, Commented Nov 30, 2018 at 3:29
Read the authorization docs like Chris suggested. There's no reason for globals here. — Devon Bessemer
– Devon Bessemer, Commented Nov 30, 2018 at 3:30
I'm a tad bias, because its my answer - but you should really read my answer... Using globals in situations like this is asking for trouble — Chris
– Chris, Commented Nov 30, 2018 at 4:06
Will try to understand on the usage of authorization. I'll update later — A.nia
– A.nia, Commented Nov 30, 2018 at 5:43

Chris · Accepted Answer · 2018-11-30 03:09:51Z

1

This requirement wouldn't request "global" variables.

In any controller, you will have access to the user via the Auth facade:

public function index() 
{
  if (Auth::check()) {
    // The user is logged in...
    if(Auth::user()->role === 'something') {
      // Do something when x role
    }
  }
}

Note, this is a very primitive example - most likely you want to read through the authorization documentation (https://laravel.com/docs/5.7/authorization) which provides more robust approach to authorization (not authentication) than simple if checks.

The point of the above snippet is more about showing that you don't need to have globals to do what you need to do.

If you absolutely need to use globals (please don't - you really don't need to), you still have access to all normal PHP approaches, such as:

$GLOBALS['variable'] = 'foo';

answered Nov 30, 2018 at 3:09

Chris

58.9k34 gold badges158 silver badges198 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

A.nia Over a year ago

Maybe i misinterpret my question. Now i have no problem when login to redirect to the intended page. Problem i'm facing here is on each view.blade, it only appear data related. Example: Table1: Users->role->chicken, Table2: Class->Dancetype->chicken, goat, cow. So when i login as Chicken, i only can view Dancetype-> chicken.

Joe Over a year ago

@A.nia Chris is correct. and authorization != authentication. authorization is when you allow/deny access to a certain resource based on his/her role.

Josh Young · Accepted Answer · 2018-11-30 03:32:52Z

0

nia

I would save the information that you need to the session as this will update the information each time they login

This can be done like this:

Session::put('yourUniqueSessionName', 'valuesYouWishToStore');

You can access the session data like this:

if (Session::has('yourUniqueSessionName') ) {

    $data = Session::get('yourUniqueSessionName');

} else {

    $data = (get the data that you want again);

}

This will then allow you to query the Session data and see what you want to allow them to access.

For more info:

https://laravel.com/docs/5.7/session

Hope this helps

answered Nov 30, 2018 at 3:32

Josh Young

1,36612 silver badges29 bronze badges

Comments

Lakhwinder Singh · Accepted Answer · 2019-05-29 11:12:24Z

0

After trying the suggestion by Chris and Josh, I have updated the code:

LoginController.php

protected function authenticated($request, $user)
{

     $user = auth()->user();
     $role=$user->role;
     Session::put('role', $role);


    if($user->role == 'workers') {

        $this->redirectTo = ('/home');
    }  else if($user->role == 'manager') {

        $this->redirectTo = ('/welcome');
    } else { //($user->role = 'admin')

        $this->redirectTo = ('/dashboard');
    }

    return redirect()->intended($this->redirectPath());
}

AttendanceController.php

public function index() {

    $user = auth()->user();
    $position=$user->position;
}

edited May 29, 2019 at 11:12

Lakhwinder Singh

5,5825 gold badges30 silver badges52 bronze badges

answered Dec 11, 2018 at 1:27

A.nia

231 silver badge4 bronze badges

Collectives™ on Stack Overflow

Laravel Variable Use In Every View

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related