v2.0.1 — Migration Fixes & MySQL Compatibility

This patch release resolves the installation issues reported on v2.0.0, so php artisan migrate now works reliably on MySQL, PostgreSQL and SQLite for fresh installations.

🐛 What's Fixed

• Migration dependency order — teams is now created before user_roles and user_permissions, fixing foreign-key failures on MySQL where the referenced table must exist first.
• MySQL primary-key compatibility — the nullable team_id column is no longer placed inside a composite PRIMARY KEY (rejected by MySQL). user_roles now uses a safe primary key with a UNIQUE(user_id, role_id, team_id) constraint.
• Deterministic schema — all 14 migrations were renumbered (2026_08_20_000001 … 2026_08_20_000014) and cleaned up so a fresh install always succeeds in the correct order.

🗄️ Schema (14 tables)

roles · permission_groups · permissions · teams · role_permissions · user_roles · user_permissions · role_inherits · permission_sets · permission_set_items · team_user · permission_conditions · permission_audits · authorization_logs

⚠️ Upgrading from v1.x / v2.0.0

Migrations in this release are fresh-install schemas. If you are upgrading an existing database:

1. Export your data first: php artisan role:export roles.json
2. Drop the old package tables (or remove their rows from the migrations table), then run: php artisan migrate
3. Re-import your data: php artisan role:import roles.json

✅ Fresh installations are unaffected — just run composer require + php artisan migrate.

🧪 Verified

• ✅ Fresh install on MySQL 8 / SQLite / PostgreSQL
• ✅ All 14 tables, indexes and foreign keys created correctly
• ✅ 141 tests / 226 assertions passing

🎉 Laravel Permission Manager v2.0.0

A major release that transforms the package into an enterprise-grade authorization platform.

🚀 What's New

Core Authorization Engine

• AuthorizationManager: Centralized authorization engine with detailed decisions
• AuthorizationResult: Rich result objects with reasons and metadata
• WildcardMatcher: Enhanced with negation support (!users.delete)
• PermissionSnapshot: Debug complete authorization state

Access Control

• ✅ Direct User Permissions (givePermissionTo, denyPermissionTo)
• ✅ Explicit Allow/Deny with precedence rules
• ✅ Role Hierarchy with multi-level inheritance and cycle detection
• ✅ Temporary Permissions with auto-expiration
• ✅ Super Admin bypass (configurable)

Enterprise Features

• 🏢 Teams / Multi-Tenancy — different roles per team
• 🧠 ABAC (Attribute-Based Access Control) with JSON conditions
• 🛡️ Multi-Guard support with guard_name
• 📝 Audit Logging for all mutations
• 🔍 Authorization Audit Trail (optional)
• 🔔 Events system for all state changes

Laravel Integration

• 🔐 Gate::before() integration — native can()/cannot() support
• 📋 Policy support via PolicyResolver
• 🛡️ Advanced Middleware DSL — any/all/not modes
• 🎨 12+ Blade directives — [@role](https://github.com/role), [@hasanyrole](https://github.com/hasanyrole), [@unlesspermission](https://github.com/unlesspermission), etc.

Developer Experience

• permission:why — explain why access was denied
• permission:doctor — system health diagnostics
• permission:tree — role hierarchy visualization
• permission:explain — JSON authorization debug
• permission:validate — configuration validation
• permission:prune — cleanup expired permissions
• permission:cache:warm — cache preloading
• permission:generate-resource — CRUD permission generator

Testing

• 🧪 141 passing tests with 226 assertions
• 🎯 Unit, Feature, and Integration suites
• 🧰 Testing helpers: InteractsWithPermissions, PermissionAssertions

📦 Installation

composer require hosseinhezami/laravel-permission-manager:^2.0
php artisan vendor:publish --provider="HosseinHezami\PermissionManager\PermissionManagerServiceProvider" --tag="config"
php artisan vendor:publish --provider="HosseinHezami\PermissionManager\PermissionManagerServiceProvider" --tag="migrations"
php artisan migrate

⬆️ Upgrading from v1.x

No breaking changes — all v1 methods, commands, and directives remain unchanged.

📊 Comparison with v1.x

🙏 Acknowledgments

Special thanks to all contributors and users who provided feedback during development.

Full Changelog: https://github.com/hosseinhezami/laravel-permission-manager/compare/v1.1.0...v2.0.0

Added support for Laravel 13

feat: Enhanced permission checking with array support and flexible validation logic

A comprehensive and advanced permission management system for Laravel applications. This package provides a robust role-based access control (RBAC) system with support for wildcard permissions, blade directives, Artisan commands, and a fluent API.