Multi User Permission System

[xchimx]

Hey there, THX for this great extension.
I wonder if there is a Multi User Permission System?

Every user has its own folder, that only he has the rights to read/edit

How to achieve this?

[mwguerra]

Thanks for the question! Per-user file isolation can be achieved in a couple of ways:

Option 1: Dynamic Target Directory (Recommended)

Scope each user to their own folder using closures:

use MWGuerra\FileManager\Schemas\Components\FileManagerEmbed;

FileManagerEmbed::make()
    ->disk('s3')
    ->target(fn () => 'users/' . auth()->id())
    ->sidebarRootLabel(fn () => auth()->user()->name . "'s Files")

This gives each user their own isolated directory (users/1/, users/2/, etc.).

Option 2: Laravel Policy Authorization

For more granular control, you can create a policy for the FileSystemItem model:

// app/Policies/FileSystemItemPolicy.php
class FileSystemItemPolicy
{
    public function view(User $user, FileSystemItem $item): bool
    {
        return $item->user_id === $user->id;
    }

    public function update(User $user, FileSystemItem $item): bool
    {
        return $item->user_id === $user->id;
    }

    public function delete(User $user, FileSystemItem $item): bool
    {
        return $item->user_id === $user->id;
    }
}

Then register it and add a user_id column to track ownership.

Option 3: Combine Both

Use dynamic target directories for physical isolation AND policies for database-level authorization:

FileManagerEmbed::make()
    ->target(fn () => 'users/' . auth()->id())

Plus a policy that enforces the user can only access their own records.

---

Which approach fits your use case best? I can provide more detailed implementation guidance.

[xchimx]

Hey,
Thanks for your reply.
Unfortunately, the recommended solution throws an error for me, probably because of the function.

MWGuerra\FileManager\Schemas\Components\FileManagerEmbed::target(): Argument #1 ($target) must be of type ?string, Closure given

My solution was very similar:

FileManagerEmbed::make()
    ->sidebarRootLabel(fn () => auth()->user()->name."'s Dokumente")
    ->breadcrumbsRootLabel('Dokumentenspeicher')
    ->initialFolder('documents/user/'.auth()->id())
    ->target('documents/user/'.auth()->id())
    ->columnSpanFull(),
]);

However, to identify the files later, I also added a “user_id/company_id” to the table.
and add a scope to the FileSystemItem Model.

So again thank you for your package :)

Thanks for the question! Per-user file isolation can be achieved in a couple of ways:

Option 1: Dynamic Target Directory (Recommended)

Scope each user to their own folder using closures:

use MWGuerra\FileManager\Schemas\Components\FileManagerEmbed;

FileManagerEmbed::make()
->disk('s3')
->target(fn () => 'users/' . auth()->id())
->sidebarRootLabel(fn () => auth()->user()->name . "'s Files")
This gives each user their own isolated directory (users/1/, users/2/, etc.).

Which approach fits your use case best? I can provide more detailed implementation guidance.