v3.1.1

What's Changed

• fix: ability strings on HasPermissions roles; conditions checked once (3.1.1) by @webard in #29

Full Changelog: v3.1.0...v3.1.1

v3.1.0

What's Changed

• feat: conditions on accounts, explainer() and problemDetails() (3.1.0) by @webard in #28

Full Changelog: v3.0.0...v3.1.0

v3.0.0

What's Changed

• fix: rector config works with Rector 2.6 by @webard in #22
• feat: rules between permissions — Requires, ImpliedBy, ConflictsWith by @webard in #24
• feat: getEffectivePermissions() — list the permissions a principal may act on by @webard in #25
• ci: stop running the test suite on Windows by @webard in #27
• feat: permission graphs — permission:graph and AccessControl::diagram() by @webard in #26

Full Changelog: v2.3.0...v3.0.0

v2.3.0

What's Changed

• build(deps): Bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4 by @dependabot[bot] in #20
• feat: MutatesData attribute and runtime permission restrictions by @webard in #21

Full Changelog: v2.2.1...v2.3.0

v2.2.1

What's Changed

• Drop an array_values() that normalised nothing by @webard in #17
• Align the new test cases with the conventions of their own files by @webard in #18
• Read the class-level attribute once per enum, not once per case by @webard in #19

Full Changelog: v2.2.0...v2.2.1

v2.2.0

What's Changed

• feat: a permission declares the surfaces it is available on by @webard in #13

Full Changelog: v2.1.1...v2.2.0

v2.1.1

Fixed

The refusal returned when the gate is handed no user at all said Unauthenicated. — a misspelling of Unauthenticated. carried since the initial import.

That string is not debug text. Consumers publish it verbatim: Sellero's public GraphQL API puts it straight into its error envelope, so a partner integration reading errors.0.message saw the typo.

Unauthorized. — the other refusal, for a principal that lacks the ability — is unchanged. The two are different problems on the caller's side and take different fixes, and consumers assert the difference between them. Nothing in this package pinned either string before, which is how the typo survived two releases; both are now asserted as values by GateConfiguratorTest.

Upgrading

Anything asserting or comparing against the old spelling has to change with it. Released as a patch, since the correct spelling is what every consumer already meant to match.

Full diff: v2.1.0...v2.1.1

v2.1.0

What's Changed

• build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #2
• build(deps): Bump actions/cache from 5.0.5 to 6.1.0 by @dependabot[bot] in #3
• build(deps): Bump stefanzweifel/git-auto-commit-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #5
• build(deps): Bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 by @dependabot[bot] in #4
• build(deps): Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 by @dependabot[bot] in #6
• build(deps): Bump zizmorcore/zizmor-action from 0.6.0 to 0.6.2 by @dependabot[bot] in #9
• build(deps): Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #7
• feat: subject level between a permission group and its permissions by @webard in #10

New Contributors

• @dependabot[bot] made their first contribution in #2
• @webard made their first contribution in #10

Full Changelog: v2.0.0...v2.1.0

v2.0.0

Full Changelog: https://github.com/happenv-com/laravel-access-control/commits/v2.0.0