Working with Permissions

use RbacSuite\OmniAccess\Models\Permission;
use RbacSuite\OmniAccess\Models\Group;

// Create permission group
$group = Group::create([
    'name' => 'Post Management',
    'slug' => 'post-management',
    'description' => 'Permissions for managing posts',
    'sort_order' => 1
]);

// Create permission
$permission = Permission::create([
    'name' => 'Edit Posts',
    'slug' => 'posts.edit',
    'description' => 'Can edit posts',
    'group_id' => $group->id
]);

// Give direct permission to user
$user->givePermissionTo('special.access');

// Revoke direct permission
$user->revokePermissionTo('special.access');

// Check permission (includes role permissions)
if ($user->hasPermission('posts.edit')) {
    // User can edit posts
}

// Check multiple permissions
if ($user->hasAnyPermission(['posts.edit', 'posts.delete'])) {
    // Has at least one permission
}

if ($user->hasAllPermissions(['posts.edit', 'posts.publish'])) {
    // Has all permissions
}

// Get all groups with permissions
$groups = Group::with('permissions')->orderBy('sort_order')->get();

// Get permissions by group
$group = Group::where('slug', 'post-management')->first();
$permissions = $group->permissions; // All permissions in this group

// Get user permissions grouped
$grouped = $user->getGroupedPermissions();
// Returns: ['Post Management' => [...permissions], 'User Management' => [...]]

// Get all user permissions (direct + from roles)
$permissions = $user->getAllPermissions();

// Check model-based permission
if ($user->canOnModel('edit', Post::class)) {
    // User can edit posts
}

// Cache operations
$user->refreshPermissionsCache(); // Refresh cached permissions