The 142 permissions a full TruCMS installation seeds, grouped by owner. Admin routes check them with ->can('name'); the Routes column counts how many registered routes do.
| Role | Seeded by | Notes |
|---|---|---|
Super Admin (id 1) | Core | The role whose id is config('dotartisan.super_admin_role') passes every authorisation check through Gate::before, whatever permissions it holds |
User | Core | The usual default role for new registrations (setting public_user_role). No admin permissions |
booking-admin, booking-manager, booking-provider, booking-customer | Booking | Booking back office, staff cabinet and customer cabinet |
TruCommerce and TruPayments add no roles; they give their permissions to Super Admin. Assign them to other roles in Users → Roles.
Seeded by Database\Seeders\RolePermissionsSeeder. The group is what the role editor uses to arrange the permission matrix.
| Permission | Group | Description | Routes |
|---|---|---|---|
manage advertisements | advertisements | Manage advertisements. | 2 |
create advertisements | advertisements | Create advertisements. | 2 |
edit advertisements | advertisements | Edit advertisements. | 2 |
delete advertisements | advertisements | Delete advertisements. | 1 |
manage menus | menus | Manage Menus. | 2 |
create menus | menus | Create Menus. | 1 |
edit menus | menus | Edit Menus. | 1 |
delete menus | menus | Delete Menus. | 2 |
manage widgets | menus | Manage Widgets. | 1 |
import website templates | menus | Import ready-made website templates, optionally replacing existing pages. | 10 |
manage page | page | Manage Page. | 1 |
create page | page | Create Page. | 2 |
edit page | page | Edit Page. | 12 |
delete page | page | Delete Page. | 1 |
manage plugins | plugins | View installed plugins and their state. | 1 |
install plugins | plugins | Install plugins from validated ZIP packages. | 1 |
activate plugins | plugins | Activate and deactivate plugins. | 2 |
delete plugins | plugins | Delete inactive plugins when safe. | 1 |
manage post | posts | Manage Post. | 2 |
create post | posts | Create Post. | 2 |
edit post | posts | Edit Post. | 2 |
delete post | posts | Delete Post. | 1 |
view category | posts | View Category. | 1 |
create category | posts | Create Category. | 1 |
edit category | posts | Edit Category. | 2 |
delete category | posts | Delete Category. | 1 |
view tag | posts | View tag. | 1 |
create tag | posts | Create tag. | 1 |
edit tag | posts | Edit tag. | 2 |
delete tag | posts | Delete tag. | 1 |
manage roles | roles | Manage System User Roles. | 3 |
create roles | roles | Create Roles. | 2 |
edit roles | roles | Edit Roles. | 2 |
delete roles | roles | Delete Roles. | 1 |
manage permissions | roles | Manage System User Permissions. | 4 |
view all tickets | support | View and manage all support tickets. | 7 |
answer tickets | support | Reply to support tickets. | 0 |
close tickets | support | Close support tickets. | 0 |
download tickets | support | Download support ticket attachments. | 0 |
manage ticket categories | support | Manage support ticket categories. | 6 |
manage dashboard | system | Manage dashboard. | 2 |
application operations | system | Manage application operations. | 15 |
manage updates | system | Manage System updates. | 2 |
manage settings | system | Delete Settings. | 4 |
manage languages | system | Manage languages. | 0 |
manage users | users | Manage System Users. | 3 |
create users | users | Create System Users. | 2 |
edit users | users | Edit System Users. | 3 |
manage profile | users | Manage account profile. | 6 |
Seeded by BookingRolesAndPermissionsSeeder; the refund permissions were added later by the migration add_booking_refund_permissions. Every Booking admin route also requires its own permission; there is no single parent permission.
| Permission | Group | Description | Routes |
|---|---|---|---|
manage booking appointments | booking-appointments | View and manage all appointments. | 24 |
create booking appointments | booking-appointments | Create booking appointments. | 3 |
edit booking appointments | booking-appointments | Edit booking appointments. | 3 |
delete booking appointments | booking-appointments | Delete booking appointments. | 1 |
change booking appointment status | booking-appointments | Approve, reject, cancel, or complete appointments. | 1 |
check in booking appointments | booking-appointments | Check in customers using QR or booking code. | 2 |
reschedule booking appointments | booking-appointments | Reschedule appointments. | 0 |
access booking staff cabinet | booking-cabinet | Access provider/staff cabinet. | 13 |
access booking customer cabinet | booking-cabinet | Access customer booking cabinet. | 4 |
manage booking calendar | booking-calendar | View and manage booking calendar. | 9 |
manage booking categories | booking-categories | Manage booking categories. | 7 |
manage booking coupons | booking-coupons | Manage booking coupons and discounts. | 7 |
manage booking custom fields | booking-custom-fields | Manage booking custom fields. | 13 |
manage booking customers | booking-customers | Manage booking customers. | 15 |
manage booking dashboard | booking-dashboard | Access and manage booking dashboard. | 1 |
manage booking extras | booking-extras | Manage booking extras. | 7 |
manage booking invoices | booking-invoices | Manage booking invoices. | 8 |
manage booking locations | booking-locations | Manage booking locations. | 7 |
manage booking notifications | booking-notifications | Manage booking email and SMS notifications. | 7 |
manage booking packages | booking-packages | Manage booking packages. | 7 |
manage booking payments | booking-payments | Manage booking payments. | 8 |
view booking refunds | booking-refunds | View booking refund requests. | 2 |
approve booking refunds | booking-refunds | Approve booking refund requests. | 1 |
change booking refund amounts | booking-refunds | Change the proposed amount before approving a booking refund. | 0 |
decline booking refunds | booking-refunds | Decline booking refund requests. | 1 |
retry booking refunds | booking-refunds | Retry failed automatic booking refunds. | 1 |
manage booking reports | booking-reports | Access booking reports and analytics. | 2 |
manage booking services | booking-services | Manage booking services. | 10 |
create booking services | booking-services | Create booking services. | 2 |
edit booking services | booking-services | Edit booking services. | 2 |
delete booking services | booking-services | Delete booking services. | 1 |
manage booking settings | booking-settings | Manage booking module settings. | 10 |
manage booking staff | booking-staff | Manage booking staff/providers. | 8 |
manage booking staff schedule | booking-staff | Manage provider schedules. | 5 |
manage booking taxes | booking-taxes | Manage booking taxes. | 7 |
Seeded by TruCommerceRolesAndPermissionsSeeder and given to the Super Admin role. access trucommerce guards the whole admin/commerce route group; each area then has four permissions:
access trucommerce
{manage|create|edit|delete} trucommerce {area}
areas: products, categories, attributes, promotions, orders, customers, reviews, channels, locations, zones, taxes, shipping, reports, pos57 permissions in total. Their descriptions are empty in the seeder.
A single permission, access trupayments, guards every payments admin route (18 routes). It is given to the Super Admin role.
These names appear in route middleware but no seeder or migration creates them, so only the super administrator (who bypasses every check) passes them:
delete users — admin.users.destroy, admin.users.deletedelete widgets — admin.widgets.destroyedit widgets — admin.widgets.updateview users — admin.users.showview widgets — admin.widgets.indexTo let other roles use these screens, create the permissions on your site (for example in a small migration, as shown in Permissions and roles) and assign them. See Known quirks.