Authorized Model Attributes for Laravel 5

Provides ability to dynamically add hidden columns to the models.

Note: There is also a makeHidden() method available if you only need hide certain columns only from one model.

Installation

Just require the package to your Laravel project.

composer require salomoni/authorized-attributes

Usage

Use the Salomoni\AuthorizedAttributes trait

<?php

namespace App;

use Illuminate\Database\Eloquent\Model;
use Salomoni\AuthorizedAttributes;

class Post extends Model
{
    use AuthorizedAttributes;

    /**
     * The attributes that should be hidden for serialization.
     *
     * @var array
     */
    protected $hidden = ['author_comments'];
}

Create and register a model policy. Add methods for the hidden attributes in camel-case prefixed with see.

<?php

namespace App\Policies;

use App\User;

class PostPolicy
{
    /**
     * Determine if a post author_comments-atrribute can be seen by the user.
     *
     * @param  \App\User  $user
     * @return bool
     */
    public function seeAuthorComments(User $user)
    {
        return $user->isAuthor();
    }
}

Mixin with always hidden attributes

The attributes will be hidden if no policy or ability (method) are found.

Modify the ability method name

<?php

class Post extends Model
{
    /**
     * Get the method name for the attribute visibility ability in the model policy.
     *
     * @param  string  $attribute
     * @return string
     */
    protected function getAttributeAbilityMethod($attribute)
    {
        return $attribute;
    }
}