Core Concepts
Roles, permissions, user roles, controller and route access, and how they fit together.
- How SystemRoles Works This page explains the ideas behind SystemRoles. Read it once before you design your roles.
- Roles Roles live in the system_roles table and are managed at Admin → Roles (/systemroles/admin/roles).
- Permissions Permissions live in system_roles_in, one row per permission per role. Manage them from:
- Assigning Roles to Users Each user has one role, stored in user_roles. Assign it from Admin → Users (/systemroles/admin/roles/users) or from code.
- Controller (Class) Access Controller access lets an administrator allow or deny a role on a whole controller, without code changes. Manage it at Admin → Classes…
- Route Access Route access stores every route of your application in system_routes and lets you mark, per role, whether the role may use it (system_routes_in).
- Menus Menus are meant to let you build navigation menus whose items link to stored routes and show only to the roles allowed to see them.