how to use a super admin when team are enabled

[sohailahmad07]

HI when you enable teams then you lose global roles permission like in my apps teams are optional and we the user login he has a User role with some permission but i can not access any of those permissions unless i assign the user to a team similarly i have a super admin role which can handle all of these different teams but is not associated with any teams what about that

so is there a way to handle global roles and permission we user teams are enabled

[erikn69]

For global roles just set to NULL the team_id on the roles table

[sohailahmad07]

@erikn69 thnx i appreciate you helping me i will explain the feature i am trying to implement and if you have any idea on how can I achieve that with spaite teams permission let me know

so by default teams are optional in my app Users don't have a team when the user register

so by default, you have these global roles like user, admin, and super-admin, and they have permission if they can do something or not in app

now there are some parts of the app that can not be accessed without a team so for that you have to join and team

once you join a team along with a default role you also get a team role which lets access the team stuff which will be up to the team leader how much access he wants to give to you for that team

i hope it helps

[erikn69]

In my opinion everything should work for you 👍

[sohailahmad07]

ok but its not so here my code in database seeder

   User::factory()->create([
            'name' => 'Test User',
            'email' => '[email protected]',
        ]);

        User::factory(10)->create();
        Role::create(['name' => 'Super Admin']);
        Role::create(['name' => 'Admin']);
        Role::create(['name' => 'User']);

//        setPermissionsTeamId(1);
        User::first()->assignRole('Super Admin');
        User::find(2)->assignRole('Admin');
        User::find(3)->assignRole('User');

Error I get

SQLSTATE[23000]: Integrity constraint violation: 1048 Column 'organization_id' cannot be null (Connection: mariadb, SQL: insert into `model_has_roles` (`model_id`, `model_type`, `organization_id`, `role_id`) values (1, App\Models\User, ?, 1))

when i enable setPermissionsTeamId(1) it works but like is said those roles are not for the team what am i missing here

[erikn69]

Needs a default team
basic-usage/teams-permissions#content-defining-a-super-admin-on-teams

You can't have them without at least one team, a main team

Maybe this package is not for your case, you could customize it, so it would work as you expect, or opt for another one that fits better.

[sohailahmad07]

well I don't know if its going to bite my later but i changed migrate after reading this #2446 discussion in which you can set a placeholder team id like 0 which does not exist and you can and since you can do that i changed the migration make team_id on modal_has_roles nullable and remove the teams' ids from a primary key and me some change to the roles method code is provided below

looking in tinker and everything seems to be working fine

if you have a global role like super admin you don't need to set team_id to get the role you can just use
$user->roles // will give all of this users global roles
how every if you set team id and the use
setPermissionsTeamId(1)
$user->roles // it will give you both global roles and team base roles for that user

which is kind of what I want

I WILL UPDATE THIS IF I GET ANY SIDE EFFECTS IN MY PROJECT

change i made in the permission migration

   if ($teams) {
                $table->unsignedBigInteger($columnNames['team_foreign_key'])->nullable(); // change here
                $table->index($columnNames['team_foreign_key'], 'model_has_roles_team_foreign_key_index');

                $table->primary([$pivotRole, $columnNames['model_morph_key'], 'model_type'], // change here
                    'model_has_roles_role_model_type_primary');
            } else {
                $table->primary([$pivotRole, $columnNames['model_morph_key'], 'model_type'],
                    'model_has_roles_role_model_type_primary');
            }

In user Modal to overwrite the default roles behavior

    public function roles(): BelongsToMany
   {
       $relation = $this->morphToMany(
           config('permission.models.role'),
           'model',
           config('permission.table_names.model_has_roles'),
           config('permission.column_names.model_morph_key'),
           app(PermissionRegistrar::class)->pivotRole
       );
       if (!app(PermissionRegistrar::class)->teams) {
           return $relation;
       }

       $teamsKey = app(PermissionRegistrar::class)->teamsKey; // refactore

       $teamField = config('permission.table_names.roles') . '.' . $teamsKey;

     return $relation->wherePivot($teamsKey, getPermissionsTeamId())
           ->orWherePivotNull($teamsKey) // new condition
           ->wherePivot(config('permission.column_names.model_morph_key'), $this->id) // // new condition
           ->where(fn($q) => $q->whereNull($teamField)->orWhere($teamField, getPermissionsTeamId()));
   }