can() vs haspermissions()

[Houbsi]

Greetings @eramitgupta

Regarding 416b9d6#diff-86d7657433d757572a7a11c80097e5343108ac788ae1de495b56a27491f1d9cbR70-R85 Wouldn't be both the same? Or what is the difference between both? can/haspermissions

[eramitgupta]

Greetings @eramitgupta

Regarding 416b9d6#diff-86d7657433d757572a7a11c80097e5343108ac788ae1de495b56a27491f1d9cbR70-R85 Wouldn't be both the same? Or what is the difference between both? can/haspermissions

Hello @Houbsi

You have asked a good question $request->user()->can($permission)

If you look at the 2.3.2 Releases version

$request->user()->can($permission) checks only one permission

Even after checking multiple permissions, it gives correct answer, never gives wrong answer

like
(auth()->user()->can('permission_name1, permission_name2')

[eramitgupta]

In haspermissions() you can check many permissions at once.
You can check one use of your choice and many more.

I think I have answered your question

[Houbsi]

In both answers you say that you can check multiple permissions at once. I'm still a bit confused.

or is it more a || / && story, that at least one has to be true, or all?

[eramitgupta]

Hello @Houbsi

can('post-create', 'post-edit')

Two permissions cannot be checked at once

If we check two permissions at once, it returns true all the time

can('post-create')
There is only one permission at all times

• New
  hasPermissions('post-create', 'post-edit')
  Many permissions will be checked at once and it returns true or false

[Houbsi]

now i got it. if i understood it correctly, hasPermissions can also work with just 1 permission?

Do we need both then?

hasRoles & hasPermissions would be suficient. For backwards compatibility we could make can() as a facade for hasPermissions?

[eramitgupta]

yes you understood it right