Implementasi Role & Permission

Implementasi Role dan Permission

Di lesson ini, kita akan mengatur siapa yang boleh mengakses apa. Setiap user punya role berbeda dengan hak akses berbeda.

Step 1: Install Laravel Breeze

# 1. Install package Breeze
composer require laravel/breeze --dev

# 2. Install Breeze dengan template Blade (tunggu sampai selesai)
php artisan breeze:install blade

# 3. Install dependencies frontend
npm install

# 4. Compile assets
npm run build

# 5. Jalankan migration untuk tabel users
php artisan migrate

Step 2: Install Spatie Permission

# 1. Install package Spatie Permission
composer require spatie/laravel-permission

# 2. Publish file konfigurasi dan migration
php artisan vendor:publish --provider="Spatie\Permission\PermissionServiceProvider"

# 3. Jalankan migration untuk tabel roles dan permissions
php artisan migrate

Step 3: Tambahkan HasRoles ke Model User

<?php

namespace App\Models;

use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Spatie\Permission\Traits\HasRoles;  // TAMBAHKAN INI

class User extends Authenticatable
{
    use HasFactory, Notifiable, HasRoles;  // TAMBAHKAN HasRoles

    protected $fillable = [
        'name',
        'email',
        'password',
    ];

    protected $hidden = [
        'password',
        'remember_token',
    ];

    protected function casts(): array
    {
        return [
            'email_verified_at' => 'datetime',
            'password' => 'hashed',
        ];
    }
}

Step 4: Buat Seeder untuk Roles dan Users

# Buat file seeder
php artisan make:seeder RolePermissionSeeder

<?php

namespace Database\Seeders;

use App\Models\User;
use Illuminate\Database\Seeder;
use Illuminate\Support\Facades\Hash;
use Spatie\Permission\Models\Role;
use Spatie\Permission\Models\Permission;

class RolePermissionSeeder extends Seeder
{
    public function run(): void
    {
        // Reset cache permission
        app()[\Spatie\Permission\PermissionRegistrar::class]->forgetCachedPermissions();

        // ===== BUAT ROLES =====
        $roles = [
            'admin'       => 'Administrator - Akses penuh ke semua fitur',
            'dokter'      => 'Dokter - Pemeriksaan dan rekam medis',
            'perawat'     => 'Perawat - Triase dan vital signs',
            'farmasi'     => 'Farmasi - Kelola obat dan resep',
            'kasir'       => 'Kasir - Pembayaran',
            'pendaftaran' => 'Pendaftaran - Daftar pasien dan antrian',
        ];

        foreach ($roles as $name => $description) {
            Role::create(['name' => $name]);
        }
        $this->command->info('6 roles berhasil dibuat!');

        // ===== BUAT USER CONTOH =====
        
        // 1. Admin
        $admin = User::create([
            'name' => 'Administrator',
            'email' => 'admin@simrs.test',
            'password' => Hash::make('password'),
        ]);
        $admin->assignRole('admin');

        // 2. Dokter
        $dokter = User::create([
            'name' => 'dr. Ahmad Wijaya, Sp.PD',
            'email' => 'dokter@simrs.test',
            'password' => Hash::make('password'),
        ]);
        $dokter->assignRole('dokter');

        // 3. Perawat
        $perawat = User::create([
            'name' => 'Ns. Siti Aminah, S.Kep',
            'email' => 'perawat@simrs.test',
            'password' => Hash::make('password'),
        ]);
        $perawat->assignRole('perawat');

        // 4. Farmasi
        $farmasi = User::create([
            'name' => 'apt. Budi Santoso, S.Farm',
            'email' => 'farmasi@simrs.test',
            'password' => Hash::make('password'),
        ]);
        $farmasi->assignRole('farmasi');

        // 5. Kasir
        $kasir = User::create([
            'name' => 'Dewi Lestari',
            'email' => 'kasir@simrs.test',
            'password' => Hash::make('password'),
        ]);
        $kasir->assignRole('kasir');

        // 6. Pendaftaran
        $pendaftaran = User::create([
            'name' => 'Rina Wulandari',
            'email' => 'pendaftaran@simrs.test',
            'password' => Hash::make('password'),
        ]);
        $pendaftaran->assignRole('pendaftaran');

        $this->command->info('6 users contoh berhasil dibuat!');
    }
}

# Jalankan seeder
php artisan db:seed --class=RolePermissionSeeder

Step 5: Register Middleware Role (Laravel 11)

<?php

use Illuminate\Foundation\Application;
use Illuminate\Foundation\Configuration\Exceptions;
use Illuminate\Foundation\Configuration\Middleware;

return Application::configure(basePath: dirname(__DIR__))
    ->withRouting(
        web: __DIR__.'/../routes/web.php',
        commands: __DIR__.'/../routes/console.php',
        health: '/up',
    )
    ->withMiddleware(function (Middleware $middleware) {
        // Register middleware Spatie Permission
        $middleware->alias([
            'role' => \Spatie\Permission\Middleware\RoleMiddleware::class,
            'permission' => \Spatie\Permission\Middleware\PermissionMiddleware::class,
        ]);
    })
    ->withExceptions(function (Exceptions $exceptions) {
        //
    })->create();

Full Source Code

Checkpoint - Test Manual

Data Login User Contoh

Ringkasan