Filter permission must have a matching alias defined

[bedrijfsportaal]

Hi,

I'm writing page permissions for my users, this is defined in App\Config\Filters.php when accessing the page with the correct permissions it shows filter permission:users.manage must have a matching alias defined..

The alias and filter

    public $aliases = [
        'permission' => \CodeIgniter\Shield\Filters\PermissionFilter::class,
    ];

    public $filters = [
        'permission:users.manage' => [
            'before' => ['users/profile']
        ]
    ];

Is there something missing or not understand from this point, i'm lost right now..

[datamweb]

Hello, please run the following command first.

composer require codeigniter4/shield:dev-develop

There is no need to:

    public $aliases = [
        'permission' => \CodeIgniter\Shield\Filters\PermissionFilter::class,
    ];

just used :

    public $filters = [
        'permission:users.manage' => [
            'before' => ['users/profile']
        ]
    ];

[datamweb]

If you need to edit, add or delete the permissions through UI(admin panel), it is better to save them in the Settings table, not in this file app/Config/AuthGroups.php.

It depends on you.

[bedrijfsportaal]

It's not required to be managed, the permissions are added by me in App\Config\AuthGroups.php but the permissions don't work on the App\Config\Filters.php keep getting the Alias message also on default permissions.

[datamweb]

OK, I see that you have a problem.
Please post the minimum code for review, including the controller, view, routes file, filter, and anything else I can reproduce your problem.

[bedrijfsportaal]

Basicly default, it has nothing special as i'm just starting at this point.

Created

• Controller UserController.php with default method index()
• Added permission:users.create in the $filters on the before (as shown above).
• In the table auth_permissions_users i've added user ID 1 with permission users.create.

It works when
You add the permission inside __construct like: auth()->user()->hasPermission('users.create') and throw exception if not allowed.

It does not work on
Adding the permission on $filters the error thrown (in my language) is: filter permission:users.create does not have an alias defined.

[datamweb]

@bedrijfsportaal Oh, thanks, I noticed that. Please use the following way now.
app\Config\Routes.php:

$routes->get('users/profile', 'UserController::index', ['filter' => 'permission:admin.access']);

It seems that our documents need to be corrected.

[datamweb]

@kenjis please see here.

In documents CI, there is no explanation regarding the use of arguments in method filters. Therefore, it seems, it is not possible to use arguments in this method.

According to the Shield docs, it should be updated.
https://github.com/codeigniter4/shield/blob/develop/docs/authorization.md#authorizing-via-filters

[kenjis]

Yes, $filters cannot have arguments.
The current Shield docs are not correct.

[bedrijfsportaal]

@kenjis & @datamweb
That would explain what is going on, i'll change my work to setup on routes!

Thank you for the support on this matter!

[kenjis]

@datamweb

According to the Shield docs, it should be updated.
https://github.com/codeigniter4/shield/blob/develop/docs/authorization.md#authorizing-via-filters

I will take care of it.

Done. #606

[kenjis]

I sent a PR for $filters arguments.
See codeigniter4/CodeIgniter4#7159