display information about the logged in user at the user resource level

Bozz · 2023-09-28T22:47:13.971Z

good evening sir @tuto1902 , I have a php filament project, which has 2 dashboards, one "admin" and the other "user". I created a user resource(list all registered users), which is displayed in the 2 dashboards, but I would like that at the level of the user dashboard("user"), I would like that only the information of the connected user is displayed, and can only modify his information and not for others. thank you for helping me.

T

tuto1902•9/29/23, 2:07 AM

Of course. Pretty simple. Here are the concepts you need to know
- Model Global Scopes
- Policies
- Middleware Classes

Model Global Scopes basically apply specific filters to every single query you perform on a model, like for example, filtering the users by the currenlty logged in user id

Policies apply rules to what operations can be performed on a model. This is just a class that is then bound to a model. It has several predefined methods that return true (the action can be performed) or false (not allowed to do that). These are normal operations like create, delete or update. The good news is that filament will abide by any existing policies. So, if you are not allowed to modify a record for example, filament will not show the edit action button or allow you to access the edit page.

Middleware classes are just things that get executed before every request. They can be added to you filament panel configuration and can be used to apply global scopes in your panel. Here are some examples from my Sunday livestream.

// Global scope to prevent doctors (users) from seeing other doctor's schedules
Schedule::addGlobalScope(function (Builder $query) {
    $query->whereBelongsTo(Filament::auth()->user());
});

// Global scope to prevent doctors (users) from seeing other doctor's schedules
Schedule::addGlobalScope(function (Builder $query) {
    $query->whereBelongsTo(Filament::auth()->user());
});

// Global scope to prevent doctors (users) from seeing other doctor's schedules
Schedule::addGlobalScope(function (Builder $query) {
    $query->whereBelongsTo(Filament::auth()->user());
});

// Global scope to prevent doctors (users) from seeing other doctor's schedules
Schedule::addGlobalScope(function (Builder $query) {
    $query->whereBelongsTo(Filament::auth()->user());
});

T

tuto1902•9/29/23, 2:07 AM

// Middleware class that applies this global scope on each request.
class AssignGlobalScopes
{
    /**
     * Handle an incoming request.
     *
     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
     */
    public function handle(Request $request, Closure $next): Response
    {
        Schedule::addGlobalScope(function (Builder $query) {
            $query->whereBelongsTo(Filament::auth()->user(), 'owner');
        });
        return $next($request);
    }
}

// Middleware class that applies this global scope on each request.
class AssignGlobalScopes
{
    /**
     * Handle an incoming request.
     *
     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
     */
    public function handle(Request $request, Closure $next): Response
    {
        Schedule::addGlobalScope(function (Builder $query) {
            $query->whereBelongsTo(Filament::auth()->user(), 'owner');
        });
        return $next($request);
    }
}

// Middleware class that applies this global scope on each request.
class AssignGlobalScopes
{
    /**
     * Handle an incoming request.
     *
     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
     */
    public function handle(Request $request, Closure $next): Response
    {
        Schedule::addGlobalScope(function (Builder $query) {
            $query->whereBelongsTo(Filament::auth()->user(), 'owner');
        });
        return $next($request);
    }
}

// Middleware class that applies this global scope on each request.
class AssignGlobalScopes
{
    /**
     * Handle an incoming request.
     *
     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
     */
    public function handle(Request $request, Closure $next): Response
    {
        Schedule::addGlobalScope(function (Builder $query) {
            $query->whereBelongsTo(Filament::auth()->user(), 'owner');
        });
        return $next($request);
    }
}

T

tuto1902•9/29/23, 2:10 AM

// Policy that only allows admins to update users
namespace App\Policies;

class UserPolicy
{
    public function update(): bool
    {
        return auth()->user()->role->name == 'admin';
    }
}

// These are registered in the AuthServiceProvider
class AuthServiceProvider extends ServiceProvider
{
    protected $policies = [
        User::class => UserPolicy::class
    ];
}

// Policy that only allows admins to update users
namespace App\Policies;

class UserPolicy
{
    public function update(): bool
    {
        return auth()->user()->role->name == 'admin';
    }
}

// These are registered in the AuthServiceProvider
class AuthServiceProvider extends ServiceProvider
{
    protected $policies = [
        User::class => UserPolicy::class
    ];
}

// Policy that only allows admins to update users
namespace App\Policies;

class UserPolicy
{
    public function update(): bool
    {
        return auth()->user()->role->name == 'admin';
    }
}

// These are registered in the AuthServiceProvider
class AuthServiceProvider extends ServiceProvider
{
    protected $policies = [
        User::class => UserPolicy::class
    ];
}

// Policy that only allows admins to update users
namespace App\Policies;

class UserPolicy
{
    public function update(): bool
    {
        return auth()->user()->role->name == 'admin';
    }
}

// These are registered in the AuthServiceProvider
class AuthServiceProvider extends ServiceProvider
{
    protected $policies = [
        User::class => UserPolicy::class
    ];
}

T

tuto1902•9/29/23, 2:12 AM

// Middleware applied to your panel configuration
class UserPanelProvider extends PanelProvider
{
    public function panel(Panel $panel): Panel
    {
        return $panel
          // ...
          ->middleware([
              // ...
              AssignGlobalScopes::class
          ])
    }
}

// Middleware applied to your panel configuration
class UserPanelProvider extends PanelProvider
{
    public function panel(Panel $panel): Panel
    {
        return $panel
          // ...
          ->middleware([
              // ...
              AssignGlobalScopes::class
          ])
    }
}

// Middleware applied to your panel configuration
class UserPanelProvider extends PanelProvider
{
    public function panel(Panel $panel): Panel
    {
        return $panel
          // ...
          ->middleware([
              // ...
              AssignGlobalScopes::class
          ])
    }
}

// Middleware applied to your panel configuration
class UserPanelProvider extends PanelProvider
{
    public function panel(Panel $panel): Panel
    {
        return $panel
          // ...
          ->middleware([
              // ...
              AssignGlobalScopes::class
          ])
    }
}

B

BozzOP•9/29/23, 1:04 PM

hello sir @tuto1902 , I received your solution, but I am a beginner
in phph filament.
here is the nomenclature of my project.
where should I put the different pieces of code that you gave me.
I have attached the different files below
Thank you for helping me sir.

UserResource.php4.55KB

User.php1.54KB

UserPolicy.php185B

AdminPanelProvider.php2.31KB

UserPanelProvider.php2.22KB

AppServiceProvider.php361B

T

tuto1902•9/29/23, 4:30 PM

Fortunately, Laravel has a great documentation. It wouldn't be a good learning experience if I write all the code for you

So, give this three subjects a read. After that, go back and read the code I provided and you'll have a more clear idea on where everything goes.

- Model Global Scopes
https://laravel.com/docs/10.x/eloquent#writing-global-scopes
- Policies
https://laravel.com/docs/10.x/authorization#creating-policies
- Middleware
https://laravel.com/docs/10.x/middleware#defining-middleware

Laravel - The PHP Framework For Web Artisans

Laravel is a PHP web application framework with expressive, elegant syntax. We’ve already laid the foundation — freeing you to create without sweating the small things.

Laravel - The PHP Framework For Web Artisans

Laravel is a PHP web application framework with expressive, elegant syntax. We’ve already laid the foundation — freeing you to create without sweating the small things.

Laravel - The PHP Framework For Web Artisans

Laravel is a PHP web application framework with expressive, elegant syntax. We’ve already laid the foundation — freeing you to create without sweating the small things.

B

BozzOP•10/1/23, 11:03 PM

good evening sir @tuto1902 , I made the modifications in my code according to your explanation, but I have an error:
""" Class "Filament\Panel\PanelServiceProvider" not found """

here are the modifications made:

1 - To display only the information of the currently logged in user in the user dashboard, I used global scopes and policies.

First, I create a middleware class called AssignGlobalScopes that applies a global scope to each request. This global scope will filter data based on the currently authenticated user:

class AssignGlobalScopes
{
public function handle(Request $request, Closure $next): Response
{
User::addGlobalScope(function (Builder $query) {
$query->whereBelongsTo(Filament::auth()->user(), 'owner');
});
return $next($request);
}
}

2 - Next, I created a policy class called UserPolicy which only allows administrators to update users:

class UserPolicy
{
public function update(): bool
{
return auth()->user()->role->name == 'admin';
}
}

3 - I saved the policy in the AuthServiceProvider:

class AuthServiceProvider extends ServiceProvider
{
protected $policies = [
User::class => UserPolicy::class
];
}

4 - Finally, apply the middleware and policy to your UserPanelProvider:

class UserPanelProvider extends PanelProvider
{
public function panel(Panel $panel): Panel
{
return $panel
// ...
->middleware([
// ...
AssignGlobalScopes::class
])
->policy(User::class, UserPolicy::class);
}
}

I attach below the code of the modifications made

UserPanelProvider.php2.45KB

AuthServiceProvider.php577B

UserPolicy.php176B

AssignGlobalScopes.php641B

B

BozzOP•10/1/23, 11:07 PM

Solution

T

tuto1902•10/1/23, 11:22 PM

the UserPanelProvider class should be automatically created when you create a new panel using

php artisan make:filament-panel User

php artisan make:filament-panel User

and it should be located in app\Providers\Filament\UserPanelProvider.php
It also should extend Filament\PanelProvider, not FilamentServiceProvider.
And that error means that Laravel can't find the class you are extending from. Which usually means you either using the wron class name, or you didn't import the class with

use

use

T

tuto1902•10/11/23, 5:04 PM

@Bozz Its been a few days. Do you mind if I mark this as solved?

Ttuto1902 @Bozz Its been a few days. Do you mind if I mark this as solved?

B

BozzOP•10/28/23, 1:20 PM

no, the problem has not been resolved

Ttuto1902 @Bozz Its been a few days. Do you mind if I mark this as solved?

B

BozzOP•10/28/23, 1:40 PM

I hope you're doing well. I used Laravel Breeze for user registration and login and then added a form to the Livewire component (the filament form bulder), for the user profile, but when submitting the form, the page reloads and nothing is saved in the database and the fields are reset.

here are the important files

thank you for helping me.

2023_10_27_232557_create_profile_infos_table.php1.69KB

infos-form.blade.php960B

show.blade.php320B

InfosForm.php4.72KB

ProfileInfos.php731B

User.php1.13KB

web.php1.2KB

T

tuto1902•10/28/23, 10:01 PM

Looking at your code, looks like you are on Filament v2. I noticed that the documentation states that the form needs