如何区分管理员和用户

Question

I want to know how should I distinguish admin from others users not by database but by other ways (like sessions).

I think I should use a middlleware in URLs which contain "admin" or "staff". How to route it and how to handle the middelware?

Answer 1

You could use Laravel Permission (or something similar) which lets you manage user permissions and roles in a database.

Alternatively, you could create your own system by...

1. Creating a table for your roles (ie for 'user,' 'admin,' and any other distinction you may want).
2. Setting the relationship to be 1 to many (if you want users to have multiple permissions) or 1 to 1 (if you want to limit users to a single permission)
3. Create a middleware to check whether the user has permission after every route call depending on their given role. With permission proceed, otherwise you could return an error.

I would avoid methods without databases if possible for security concerns.