Laravel E-Learning Part 4: Autentikasi & Role User

Rebuild Laravel E-Learning

Part 1: Pengenalan & Mengapa Saya Upgrade

Part 2: Setup Laravel 12 + Filament

Part 3: Desain Skema Database

Part 4: Autentikasi & Role User

Part 5: Membangun Sistem Ujian

Part 6: Fitur Real-Time

Part 7: Strategi Testing

Part 8: Deployment

Artikel ini tersedia dalam Bahasa Inggris

🇬🇧 Read in English

10 Maret 2026

🇮🇩 Bahasa Indonesia

Laravel E-Learning Part 4: Autentikasi & Role User

Implementasi autentikasi berbasis role dengan role Admin, Guru, dan Siswa menggunakan Spatie Permission dan setup multi-panel Filament.

4 min read

Struktur Role

Platform e-learning kita memiliki tiga tipe user:

Role	Permissions
Admin	Akses penuh sistem, kelola user, lihat semua data
Guru	Kelola mata pelajaran, buat ujian, lihat hasil siswa
Siswa	Ikuti ujian, lihat hasil sendiri

Step 1: Konfigurasi Spatie Permission

Update model User untuk menggunakan trait HasRoles:

<?php

namespace App\Models;

use Filament\Models\Contracts\FilamentUser;
use Filament\Panel;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Spatie\Permission\Traits\HasRoles;

class User extends Authenticatable implements FilamentUser
{
    use HasFactory, Notifiable, HasRoles;

    protected $fillable = [
        'name',
        'email',
        'password',
    ];

    protected $hidden = [
        'password',
        'remember_token',
    ];

    protected function casts(): array
    {
        return [
            'email_verified_at' => 'datetime',
            'password' => 'hashed',
        ];
    }

    public function canAccessPanel(Panel $panel): bool
    {
        return match ($panel->getId()) {
            'admin' => $this->hasRole('admin'),
            'teacher' => $this->hasRole(['admin', 'teacher']),
            'student' => $this->hasRole(['admin', 'student']),
            default => false,
        };
    }
}

Step 2: Buat Seeder Roles dan Permissions

php artisan make:seeder RolePermissionSeeder

<?php

namespace Database\Seeders;

use Illuminate\Database\Seeder;
use Spatie\Permission\Models\Permission;
use Spatie\Permission\Models\Role;

class RolePermissionSeeder extends Seeder
{
    public function run(): void
    {
        // Reset cached roles dan permissions
        app()[\Spatie\Permission\PermissionRegistrar::class]->forgetCachedPermissions();

        // Definisikan permissions
        $permissions = [
            // Manajemen user
            'view_users',
            'create_users',
            'edit_users',
            'delete_users',
            
            // Manajemen mata pelajaran
            'view_subjects',
            'create_subjects',
            'edit_subjects',
            'delete_subjects',
            
            // Manajemen ujian
            'view_exams',
            'create_exams',
            'edit_exams',
            'delete_exams',
            
            // Manajemen soal
            'view_questions',
            'create_questions',
            'edit_questions',
            'delete_questions',
            
            // Hasil
            'view_all_results',
            'view_own_results',
            
            // Ikuti ujian
            'take_exams',
        ];

        foreach ($permissions as $permission) {
            Permission::create(['name' => $permission]);
        }

        // Buat roles dan assign permissions
        $adminRole = Role::create(['name' => 'admin']);
        $adminRole->givePermissionTo(Permission::all());

        $teacherRole = Role::create(['name' => 'teacher']);
        $teacherRole->givePermissionTo([
            'view_subjects', 'create_subjects', 'edit_subjects',
            'view_exams', 'create_exams', 'edit_exams', 'delete_exams',
            'view_questions', 'create_questions', 'edit_questions', 'delete_questions',
            'view_all_results',
        ]);

        $studentRole = Role::create(['name' => 'student']);
        $studentRole->givePermissionTo([
            'view_subjects',
            'view_exams',
            'take_exams',
            'view_own_results',
        ]);
    }
}

Jalankan seeder:

php artisan db:seed --class=RolePermissionSeeder

Step 3: Buat Panel Guru

php artisan make:filament-panel teacher

Konfigurasi app/Providers/Filament/TeacherPanelProvider.php:

<?php

namespace App\Providers\Filament;

use Filament\Http\Middleware\Authenticate;
use Filament\Http\Middleware\DisableBladeIconComponents;
use Filament\Http\Middleware\DispatchServingFilamentEvent;
use Filament\Pages;
use Filament\Panel;
use Filament\PanelProvider;
use Filament\Support\Colors\Color;
use Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse;
use Illuminate\Cookie\Middleware\EncryptCookies;
use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken;
use Illuminate\Routing\Middleware\SubstituteBindings;
use Illuminate\Session\Middleware\AuthenticateSession;
use Illuminate\Session\Middleware\StartSession;
use Illuminate\View\Middleware\ShareErrorsFromSession;

class TeacherPanelProvider extends PanelProvider
{
    public function panel(Panel $panel): Panel
    {
        return $panel
            ->id('teacher')
            ->path('teacher')
            ->login()
            ->colors([
                'primary' => Color::Green,
            ])
            ->brandName('E-Learning Guru')
            ->discoverResources(in: app_path('Filament/Teacher/Resources'), for: 'App\\Filament\\Teacher\\Resources')
            ->discoverPages(in: app_path('Filament/Teacher/Pages'), for: 'App\\Filament\\Teacher\\Pages')
            ->pages([
                Pages\Dashboard::class,
            ])
            ->middleware([
                EncryptCookies::class,
                AddQueuedCookiesToResponse::class,
                StartSession::class,
                AuthenticateSession::class,
                ShareErrorsFromSession::class,
                VerifyCsrfToken::class,
                SubstituteBindings::class,
                DisableBladeIconComponents::class,
                DispatchServingFilamentEvent::class,
            ])
            ->authMiddleware([
                Authenticate::class,
            ]);
    }
}

Step 4: Buat Panel Siswa

php artisan make:filament-panel student

Konfigurasi app/Providers/Filament/StudentPanelProvider.php:

<?php

namespace App\Providers\Filament;

use Filament\Http\Middleware\Authenticate;
use Filament\Http\Middleware\DisableBladeIconComponents;
use Filament\Http\Middleware\DispatchServingFilamentEvent;
use Filament\Pages;
use Filament\Panel;
use Filament\PanelProvider;
use Filament\Support\Colors\Color;
use Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse;
use Illuminate\Cookie\Middleware\EncryptCookies;
use Illuminate\Foundation\Http\Middleware\VerifyCsrfToken;
use Illuminate\Routing\Middleware\SubstituteBindings;
use Illuminate\Session\Middleware\AuthenticateSession;
use Illuminate\Session\Middleware\StartSession;
use Illuminate\View\Middleware\ShareErrorsFromSession;

class StudentPanelProvider extends PanelProvider
{
    public function panel(Panel $panel): Panel
    {
        return $panel
            ->id('student')
            ->path('student')
            ->login()
            ->registration() // Izinkan registrasi mandiri siswa
            ->colors([
                'primary' => Color::Purple,
            ])
            ->brandName('E-Learning Siswa')
            ->discoverResources(in: app_path('Filament/Student/Resources'), for: 'App\\Filament\\Student\\Resources')
            ->discoverPages(in: app_path('Filament/Student/Pages'), for: 'App\\Filament\\Student\\Pages')
            ->pages([
                Pages\Dashboard::class,
            ])
            ->middleware([
                EncryptCookies::class,
                AddQueuedCookiesToResponse::class,
                StartSession::class,
                AuthenticateSession::class,
                ShareErrorsFromSession::class,
                VerifyCsrfToken::class,
                SubstituteBindings::class,
                DisableBladeIconComponents::class,
                DispatchServingFilamentEvent::class,
            ])
            ->authMiddleware([
                Authenticate::class,
            ]);
    }
}

Step 5: Auto-Assign Role Siswa saat Registrasi

Buat observer atau gunakan event creating di model User:

// Di model User, tambahkan:
protected static function booted(): void
{
    static::created(function (User $user) {
        if (!$user->hasAnyRole(['admin', 'teacher'])) {
            $user->assignRole('student');
        }
    });
}

Step 6: Buat User Resource untuk Admin

php artisan make:filament-resource User --generate

Update app/Filament/Resources/UserResource.php:

<?php

namespace App\Filament\Resources;

use App\Filament\Resources\UserResource\Pages;
use App\Models\User;
use Filament\Forms;
use Filament\Forms\Form;
use Filament\Resources\Resource;
use Filament\Tables;
use Filament\Tables\Table;
use Illuminate\Support\Facades\Hash;
use Spatie\Permission\Models\Role;

class UserResource extends Resource
{
    protected static ?string $model = User::class;
    protected static ?string $navigationIcon = 'heroicon-o-users';
    protected static ?string $navigationGroup = 'Manajemen User';

    public static function form(Form $form): Form
    {
        return $form
            ->schema([
                Forms\Components\TextInput::make('name')
                    ->required()
                    ->maxLength(255),
                Forms\Components\TextInput::make('email')
                    ->email()
                    ->required()
                    ->unique(ignoreRecord: true)
                    ->maxLength(255),
                Forms\Components\TextInput::make('password')
                    ->password()
                    ->dehydrateStateUsing(fn ($state) => Hash::make($state))
                    ->dehydrated(fn ($state) => filled($state))
                    ->required(fn (string $context): bool => $context === 'create'),
                Forms\Components\Select::make('roles')
                    ->relationship('roles', 'name')
                    ->multiple()
                    ->preload()
                    ->required(),
            ]);
    }

    public static function table(Table $table): Table
    {
        return $table
            ->columns([
                Tables\Columns\TextColumn::make('name')
                    ->searchable(),
                Tables\Columns\TextColumn::make('email')
                    ->searchable(),
                Tables\Columns\TextColumn::make('roles.name')
                    ->badge()
                    ->color(fn (string $state): string => match ($state) {
                        'admin' => 'danger',
                        'teacher' => 'success',
                        'student' => 'info',
                        default => 'gray',
                    }),
                Tables\Columns\TextColumn::make('created_at')
                    ->dateTime()
                    ->sortable(),
            ])
            ->filters([
                Tables\Filters\SelectFilter::make('roles')
                    ->relationship('roles', 'name'),
            ])
            ->actions([
                Tables\Actions\EditAction::make(),
                Tables\Actions\DeleteAction::make(),
            ]);
    }

    public static function getPages(): array
    {
        return [
            'index' => Pages\ListUsers::route('/'),
            'create' => Pages\CreateUser::route('/create'),
            'edit' => Pages\EditUser::route('/{record}/edit'),
        ];
    }
}

URL Akses Panel

Sekarang kamu punya tiga panel terpisah:

Panel	URL	Role
Admin	`/admin`	admin
Guru	`/teacher`	admin, teacher
Siswa	`/student`	admin, student

Ringkasan

Kita sudah mengimplementasikan:

✅ Kontrol akses berbasis role dengan Spatie Permission
✅ Tiga panel Filament terpisah
✅ Manajemen user dengan assignment role
✅ Assignment otomatis role siswa saat registrasi
✅ Akses fitur berbasis permission

Selanjutnya

Di Part 5, kita akan membangun sistem ujian inti:

CRUD Ujian di Filament
Manajemen bank soal
Mengikuti ujian sebagai siswa

Lanjut ke Part 5: Membangun Sistem Ujian →