canAccessPanel() Not being called

I am triying to secure access but my canAccessPanel() is not being called. I am using FilamentUser contract in User. And below is my code. to test i am always retirnung false but i am still able to access panel. I cleared all caches.

    public function canAccessPanel(Panel $panel): bool
    {
        dd('canAccessPanel is being called!');
        return false;

        $panelId = $panel->getId();
        if ($panelId === 'labaiq-team') {
            return $this->user_type === 'platform_team_member' && str_ends_with($this->email, '@labaiq.com') && $this->email_verified_at;
        }

        if($panelId === 'user' || $panelId === 'company'){

            return $this->user_type === 'general_user';
        }


        return false;
    }

    public function canAccessPanel(Panel $panel): bool
    {
        dd('canAccessPanel is being called!');
        return false;

        $panelId = $panel->getId();
        if ($panelId === 'labaiq-team') {
            return $this->user_type === 'platform_team_member' && str_ends_with($this->email, '@labaiq.com') && $this->email_verified_at;
        }

        if($panelId === 'user' || $panelId === 'company'){

            return $this->user_type === 'general_user';
        }


        return false;
    }

Solution

Error was due to using the Custom authentication middleware in all my panels. I had commented out Authenticate::class from all auth middleware. Filament native authenticate middleware calls canAccessPanel() method directly. Whereas I implemented CustomAuthenticate::class and removed filament one which caused and issue. Fix was to include this below peice of code in my CustomAuthentciate.

$panel = Filament::getCurrentPanel();

        abort_if(
            $user instanceof FilamentUser ?
                (! $user->canAccessPanel($panel)) :
                (config('app.env') !== 'local'),
            403,
        );

$panel = Filament::getCurrentPanel();

        abort_if(
            $user instanceof FilamentUser ?
                (! $user->canAccessPanel($panel)) :
                (config('app.env') !== 'local'),
            403,
        );

Jump to solution

canAccessPanel() Not being called

    public function canAccessPanel(Panel $panel): bool
    {
        dd('canAccessPanel is being called!');
        return false;

        $panelId = $panel->getId();
        if ($panelId === 'labaiq-team') {
            return $this->user_type === 'platform_team_member' && str_ends_with($this->email, '@labaiq.com') && $this->email_verified_at;
        }

        if($panelId === 'user' || $panelId === 'company'){

            return $this->user_type === 'general_user';
        }


        return false;
    }

    public function canAccessPanel(Panel $panel): bool
    {
        dd('canAccessPanel is being called!');
        return false;

        $panelId = $panel->getId();
        if ($panelId === 'labaiq-team') {
            return $this->user_type === 'platform_team_member' && str_ends_with($this->email, '@labaiq.com') && $this->email_verified_at;
        }

        if($panelId === 'user' || $panelId === 'company'){

            return $this->user_type === 'general_user';
        }


        return false;
    }

Solution

$panel = Filament::getCurrentPanel();

        abort_if(
            $user instanceof FilamentUser ?
                (! $user->canAccessPanel($panel)) :
                (config('app.env') !== 'local'),
            403,
        );

$panel = Filament::getCurrentPanel();

        abort_if(
            $user instanceof FilamentUser ?
                (! $user->canAccessPanel($panel)) :
                (config('app.env') !== 'local'),
            403,
        );

Jump to solution

canAccessPanel() Not being called

canAccessPanel() Not being called

Similar Threads

Similar Threads

Similar Threads