Role Resource is accessible for everyone about filament-shield HOT 4 CLOSED

From the config set the following key to true to enforce the policy for RoleResource, clear your config and let me know.

 'register_role_policy' => [
     'enabled' => true,
 ],

from filament-shield.

Yes, it works. It fixed the problem for me! Thank you!

from filament-shield.

If you're using Laravel 11, you can also fix it by adding this on your AppServiceProvider.php

use Spatie\Permission\Models\Role;
use App\Policies\RolePolicy;
use Illuminate\Support\Facades\Gate;

public function boot(): void
{
    Gate::policy(Role::class, RolePolicy::class);
}

from filament-shield.

If you're using Laravel 11, you can also fix it by adding this on your AppServiceProvider.php

use Spatie\Permission\Models\Role;

use App\Policies\RolePolicy;

use Illuminate\Support\Facades\Gate;



public function boot(): void

{

    Gate::policy(Role::class, RolePolicy::class);

}

You don't really need this, because its already being handled by shield. you just need to turn it on from the config.

from filament-shield.