Skip to content

v1.2.0: Declarative RBAC & Action-Level Permission Guard

Latest

Choose a tag to compare

@kzxl kzxl released this 15 Sep 05:49

What's New in LiteAdmin v1.2.0

  • Declarative RBAC via #[Authorize]: Annotate entity classes with #[Authorize(roles: ['manager', 'admin'], action: 'create')] or #[Authorize(permissions: ['inventory.delete'], action: 'delete')].
  • Sovereign PermissionGate: Built-in permission engine supporting user resolver ($admin->setUserResolver(...)), superadmin bypass (admin, superadmin), and action-level authorization checks across all dashboard endpoints (view, create, update, delete, export).
  • Fail-Closed Security: Protected resources return HTTP 403 Forbidden with clean styled alert cards when unauthorized.
  • Index Resource Filtering: Automatically hides menu entries and resource lists for unauthorized users.