Permissions Catalogue

The 142 permissions a full TruCMS installation seeds, grouped by owner. Admin routes check them with ->can('name'); the Routes column counts how many registered routes do.

Roles

RoleSeeded byNotes
Super Admin (id 1)CoreThe role whose id is config('dotartisan.super_admin_role') passes every authorisation check through Gate::before, whatever permissions it holds
UserCoreThe usual default role for new registrations (setting public_user_role). No admin permissions
booking-admin, booking-manager, booking-provider, booking-customerBookingBooking back office, staff cabinet and customer cabinet

TruCommerce and TruPayments add no roles; they give their permissions to Super Admin. Assign them to other roles in Users → Roles.

Core

Seeded by Database\Seeders\RolePermissionsSeeder. The group is what the role editor uses to arrange the permission matrix.

PermissionGroupDescriptionRoutes
manage advertisementsadvertisementsManage advertisements.2
create advertisementsadvertisementsCreate advertisements.2
edit advertisementsadvertisementsEdit advertisements.2
delete advertisementsadvertisementsDelete advertisements.1
manage menusmenusManage Menus.2
create menusmenusCreate Menus.1
edit menusmenusEdit Menus.1
delete menusmenusDelete Menus.2
manage widgetsmenusManage Widgets.1
import website templatesmenusImport ready-made website templates, optionally replacing existing pages.10
manage pagepageManage Page.1
create pagepageCreate Page.2
edit pagepageEdit Page.12
delete pagepageDelete Page.1
manage pluginspluginsView installed plugins and their state.1
install pluginspluginsInstall plugins from validated ZIP packages.1
activate pluginspluginsActivate and deactivate plugins.2
delete pluginspluginsDelete inactive plugins when safe.1
manage postpostsManage Post.2
create postpostsCreate Post.2
edit postpostsEdit Post.2
delete postpostsDelete Post.1
view categorypostsView Category.1
create categorypostsCreate Category.1
edit categorypostsEdit Category.2
delete categorypostsDelete Category.1
view tagpostsView tag.1
create tagpostsCreate tag.1
edit tagpostsEdit tag.2
delete tagpostsDelete tag.1
manage rolesrolesManage System User Roles.3
create rolesrolesCreate Roles.2
edit rolesrolesEdit Roles.2
delete rolesrolesDelete Roles.1
manage permissionsrolesManage System User Permissions.4
view all ticketssupportView and manage all support tickets.7
answer ticketssupportReply to support tickets.0
close ticketssupportClose support tickets.0
download ticketssupportDownload support ticket attachments.0
manage ticket categoriessupportManage support ticket categories.6
manage dashboardsystemManage dashboard.2
application operationssystemManage application operations.15
manage updatessystemManage System updates.2
manage settingssystemDelete Settings.4
manage languagessystemManage languages.0
manage usersusersManage System Users.3
create usersusersCreate System Users.2
edit usersusersEdit System Users.3
manage profileusersManage account profile.6

Booking

Seeded by BookingRolesAndPermissionsSeeder; the refund permissions were added later by the migration add_booking_refund_permissions. Every Booking admin route also requires its own permission; there is no single parent permission.

PermissionGroupDescriptionRoutes
manage booking appointmentsbooking-appointmentsView and manage all appointments.24
create booking appointmentsbooking-appointmentsCreate booking appointments.3
edit booking appointmentsbooking-appointmentsEdit booking appointments.3
delete booking appointmentsbooking-appointmentsDelete booking appointments.1
change booking appointment statusbooking-appointmentsApprove, reject, cancel, or complete appointments.1
check in booking appointmentsbooking-appointmentsCheck in customers using QR or booking code.2
reschedule booking appointmentsbooking-appointmentsReschedule appointments.0
access booking staff cabinetbooking-cabinetAccess provider/staff cabinet.13
access booking customer cabinetbooking-cabinetAccess customer booking cabinet.4
manage booking calendarbooking-calendarView and manage booking calendar.9
manage booking categoriesbooking-categoriesManage booking categories.7
manage booking couponsbooking-couponsManage booking coupons and discounts.7
manage booking custom fieldsbooking-custom-fieldsManage booking custom fields.13
manage booking customersbooking-customersManage booking customers.15
manage booking dashboardbooking-dashboardAccess and manage booking dashboard.1
manage booking extrasbooking-extrasManage booking extras.7
manage booking invoicesbooking-invoicesManage booking invoices.8
manage booking locationsbooking-locationsManage booking locations.7
manage booking notificationsbooking-notificationsManage booking email and SMS notifications.7
manage booking packagesbooking-packagesManage booking packages.7
manage booking paymentsbooking-paymentsManage booking payments.8
view booking refundsbooking-refundsView booking refund requests.2
approve booking refundsbooking-refundsApprove booking refund requests.1
change booking refund amountsbooking-refundsChange the proposed amount before approving a booking refund.0
decline booking refundsbooking-refundsDecline booking refund requests.1
retry booking refundsbooking-refundsRetry failed automatic booking refunds.1
manage booking reportsbooking-reportsAccess booking reports and analytics.2
manage booking servicesbooking-servicesManage booking services.10
create booking servicesbooking-servicesCreate booking services.2
edit booking servicesbooking-servicesEdit booking services.2
delete booking servicesbooking-servicesDelete booking services.1
manage booking settingsbooking-settingsManage booking module settings.10
manage booking staffbooking-staffManage booking staff/providers.8
manage booking staff schedulebooking-staffManage provider schedules.5
manage booking taxesbooking-taxesManage booking taxes.7

TruCommerce

Seeded by TruCommerceRolesAndPermissionsSeeder and given to the Super Admin role. access trucommerce guards the whole admin/commerce route group; each area then has four permissions:

access trucommerce
{manage|create|edit|delete} trucommerce {area}

areas: products, categories, attributes, promotions, orders, customers, reviews, channels, locations, zones, taxes, shipping, reports, pos

57 permissions in total. Their descriptions are empty in the seeder.

TruPayments

A single permission, access trupayments, guards every payments admin route (18 routes). It is given to the Super Admin role.

Checked by routes but never seeded

These names appear in route middleware but no seeder or migration creates them, so only the super administrator (who bypasses every check) passes them:

To let other roles use these screens, create the permissions on your site (for example in a small migration, as shown in Permissions and roles) and assign them. See Known quirks.