Roles & Permissions

Roles & Permissions#

Commerce uses a role + individual permission system. Each staff account has a role (which sets a sensible default) and an optional custom permission override per slot.

Four Built-in Roles#

[!IMPORTANT] Roles are presets, not hard rules. After selecting a role, you can toggle individual permissions on or off. The super_admin role is the only one that cannot be restricted — it always has all permissions.

30 Permission Slugs by Area#

Clients (4)#

Invoices (3)#

Orders (2)#

Services (3)#

Domains (2)#

Tickets (3)#

Products (2)#

Servers (2)#

Reports (1)#

Settings (2)#

Staff (4)#

Using Permissions in Code#

Blade directive#

@staffcan('invoices.create')
  <a href="/admin/invoices/create">New Invoice</a>
@endstaffcan

Middleware (routes)#

Route::middleware('staff.can:services.manage')->group(function () {
    // routes only accessible with services.manage permission
});

Role Preset Defaults#