Laravel FieldGuard

Описание: 🔒 FieldGuard: Field-Level Security for Laravel Eloquent

Welcome to the official video tutorial for FieldGuard, the ultimate Laravel package designed to give you surgical precision over your data security. If you've ever struggled with hiding specific database columns from certain users, or wanted to restrict who can update a "salary" or "role" field without creating dozens of separate API resources, FieldGuard is exactly what you need.

FieldGuard allows you to define security rules for your Eloquent models dynamically. Instead of hardcoding logic in your Controllers or Resources, you can manage field-level access via a database-driven policy system.

----------------------------------------

🚀 KEY FEATURES
Fine-Grained Access Control: Go beyond table-level permissions. Control exactly which attributes (fields) can be read or written by specific users.
Dynamic Policies: Define rules using Roles (compatible with Spatie packages or custom hasRole methods), Laravel Gates, or keywords like "self" (users edit only their own data).
Data Masking: Mask sensitive fields (e.g., credit cards, emails) so users see placeholders instead of raw values.
Middleware Protection: Automatically strip unauthorized fields from incoming requests before they reach your controller.
Zero Model Bloat: Secure models without cluttering them with if/else statements or complex hidden attribute logic.
Database Driven: Update security rules instantly—no code deploys required.

----------------------------------------

🛠️ HOW IT WORKS
FieldGuard operates on simple Rules per Model and Field:
1. Read Policy: Who can view this field?
2. Write Policy: Who can modify this field?
3. Mask: How should restricted data appear?

Example Scenario:
User model with a "salary" field
Rule: model=User, field=salary
Read Policy: role:admin OR self
Write Policy: role:hr_manager
→ Employees see their own salary, Admins see all salaries, only HR Managers can edit it.

----------------------------------------

📦 INSTALLATION & SETUP
1. Install via Composer:
composer require sowailem/fieldguard

2. Publish config & run migrations:
php artisan vendor:publish --provider="Sowailem\FieldGuard\FieldGuardServiceProvider"
php artisan migrate

3. Define Gate for FieldGuard admin access (in AppServiceProvider):
Gate::define('manage-field-guard', function ($user) {
return $user--is_admin;
});

----------------------------------------

💻 USAGE IN YOUR PROJECT
• Automatic Enforcement (in AppServiceProvider boot method):
\FieldGuard::enableAutomaticEnforcement();

• Route Middleware (protect update endpoints):
Route::put('/profile', [ProfileController::class, 'update'])
--middleware('fieldguard:App\Models\User');

• Programmatic Control:
$securedUser = \FieldGuard::apply($user, auth()--user());

----------------------------------------

📋 WHY USE FIELDGUARD?
Standard Laravel Policies control Actions (Can this user update this Post?). FieldGuard controls Data (Which parts of this Post can they see/edit?). Perfect for:
✓ SaaS apps with complex role hierarchies
✓ HR, finance, or compliance-sensitive systems
✓ GDPR/privacy requirements
✓ Multi-tenant CMS platforms

----------------------------------------

🌟 SUPPORT THE PROJECT
If FieldGuard helps your workflow:
⭐ Star the repo on GitHub
🛠️ Contribute code or ideas
📢 Share this video with fellow Laravel devs!

GitHub Repository:
https://github.com/sowailem/fieldguard

#Laravel #PHP #WebDevelopment #Security #Eloquent #Backend #CodingTutorial #FieldGuard #DataSecurity #APIsecurity