Download the PHP package monkeyscloud/monkeyslegion-permissions without Composer
On this page you can find all versions of the php package monkeyscloud/monkeyslegion-permissions. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Table of contents
Download monkeyscloud/monkeyslegion-permissions
More information about monkeyscloud/monkeyslegion-permissions
Files in monkeyscloud/monkeyslegion-permissions
Download monkeyscloud/monkeyslegion-permissions
More information about monkeyscloud/monkeyslegion-permissions
Files in monkeyscloud/monkeyslegion-permissions
Vendor monkeyscloud
Package monkeyslegion-permissions
Short Description Enterprise RBAC and ABAC authorization engine for MonkeysLegion
License MIT
Homepage https://monkeyslegion.com/docs/packages/permissions
Package monkeyslegion-permissions
Short Description Enterprise RBAC and ABAC authorization engine for MonkeysLegion
License MIT
Homepage https://monkeyslegion.com/docs/packages/permissions
Please rate this library. Is it a good library?
Informations about the package monkeyslegion-permissions
MonkeysLegion Permissions v1
Enterprise RBAC, policy gates, composable rules, approval workflows, LDAP/SAML sync, and Apex AI fuzzy authorization for MonkeysLegion. Ground-up build for PHP 8.4 with property hooks, backed enums, and zero magic.
Features
| Feature | Status |
|---|---|
| Authorizer Pipeline | Gate → PolicyResolver → RuleEngine → Decision |
| Attribute-First Security | #[RequiresRole], #[RequiresPermission], #[Authorize], #[Gate] |
| Policy System | Model-to-policy mapping with before() / after() hooks |
| Composable Rules | Predicate engine with AND/OR/NOT/CUSTOM operators, priority-based execution |
| Database Store | Role, Permission, UserRole, UserPermission, StoredRule entities |
| Approval Workflows | PermissionRequest → review → approve/deny with expiry |
| Cache Layer | Transparent permission caching with TTL and tag-based invalidation |
| LDAP/SAML Sync | RoleSyncAdapterInterface with additive/replace/merge/intersect strategies |
| Apex AI Integration | LLM-backed fuzzy policy evaluation with confidence thresholds |
| PSR-15 Middleware | AuthorizationMiddleware — attribute-aware request authorization |
| Event System | 11 audit events for authorization, roles, permissions, and sync |
| CLI Commands | permissions:install, permissions:entities |
| PHP 8.4 Native | Property hooks, backed enums, asymmetric visibility |
Requirements
- PHP 8.4 or higher
monkeyscloud/monkeyslegion-di(Container)monkeyscloud/monkeyslegion-events(Event dispatching)psr/http-message^2.0psr/http-server-middleware^1.0
Installation
Quick Setup
Architecture
The package is organized into clear namespaces:
Apex/: AI-powered fuzzy policy evaluation (ApexPolicyAdapter,ApexGateRegistrar)Attributes/: Controller/method attributes (#[RequiresRole],#[RequiresPermission],#[Authorize],#[Gate])Cache/: Transparent permission caching (CacheLayer)Contracts/: Core interfaces (AuthorizerInterface)Entity/: Database entities (Role, Permission, UserRole, UserPermission, StoredRule, PermissionRequest)Event/: 11 audit events for all authorization operationsExceptions/:AuthorizationExceptionGate/: Ability definitions and closuresMiddleware/: PSR-15AuthorizationMiddlewarePolicy/: Model-to-policy mapping (Policy,PolicyResolver)Provider/: DI service provider (PermissionsProvider)Rule/: Composable predicate engine (Rule,Predicate,RuleEngine)Store/: Database persistence (DatabaseStore,PermissionStoreInterface)Sync/: LDAP/SAML role synchronization (RoleSyncManager, adapters)Workflow/: Approval request pipeline (RequestManager)
Configuration
Attribute-Based Authorization
Gate (Ability Definitions)
Policy System
Composable Rules
Approval Workflows
LDAP/SAML Sync
| Strategies: | Strategy | Behavior |
|---|---|---|
Additive |
Only add new roles, never remove | |
Replace |
External roles replace all local roles | |
Merge |
Union of external and local roles | |
IntersectLocal |
Keep only roles that exist both externally and locally |
Apex AI Fuzzy Authorization
Database Entities
The package includes 8 entity stubs ready for database persistence:
| Entity | Purpose |
|---|---|
Role |
Roles with key, name, level, metadata |
Permission |
Permissions with key, name, group |
UserRole |
User ↔ Role assignments with expiry |
UserPermission |
Direct user ↔ permission grants with expiry |
StoredRule |
Persistent composable rules with predicates |
PermissionRequest |
Approval workflow requests |
RequestStatus |
Enum: pending, approved, denied, expired |
RequestType |
Enum: permission, role |
Events
| Event | When Dispatched |
|---|---|
AuthorizationChecked |
Any authorization check completes |
AuthorizationDenied |
Authorization denied |
PermissionGranted |
Permission assigned to user |
PermissionRevoked |
Permission removed from user |
PermissionRequested |
User requests a permission |
RequestApproved |
Request approved by reviewer |
RequestDenied |
Request denied by reviewer |
RoleAssigned |
Role assigned to user |
RoleRevoked |
Role removed from user |
RolesSynced |
External role sync completed |
ApexPolicyEvaluated |
AI policy evaluation completed |
PolicyEvaluated |
Standard policy evaluation completed |
Middleware Setup
Cache Layer
Security Posture
- Deny by default — no permission means no access
- Super-admin bypass — configurable super-admin role
- Expiring grants — UserRole and UserPermission support
expires_at - Audit trail — 12 event types for full observability
- AI confidence gates — configurable threshold prevents uncertain AI decisions
- Cache invalidation — automatic cache flush on permission changes
Testing
License
MIT © MonkeysCloud
All versions of monkeyslegion-permissions with dependencies
PHP Build Version
Package Version
Requires
php Version
^8.4
monkeyscloud/monkeyslegion-core Version *
monkeyscloud/monkeyslegion-di Version *
monkeyscloud/monkeyslegion-auth Version *
monkeyscloud/monkeyslegion-entity Version *
monkeyscloud/monkeyslegion-cache Version *
monkeyscloud/monkeyslegion-database Version *
monkeyscloud/monkeyslegion-events Version *
monkeyscloud/monkeyslegion-http Version *
psr/http-message Version ^2.0
psr/http-server-middleware Version ^1.0
monkeyscloud/monkeyslegion-core Version *
monkeyscloud/monkeyslegion-di Version *
monkeyscloud/monkeyslegion-auth Version *
monkeyscloud/monkeyslegion-entity Version *
monkeyscloud/monkeyslegion-cache Version *
monkeyscloud/monkeyslegion-database Version *
monkeyscloud/monkeyslegion-events Version *
monkeyscloud/monkeyslegion-http Version *
psr/http-message Version ^2.0
psr/http-server-middleware Version ^1.0
The package monkeyscloud/monkeyslegion-permissions contains the following files
Loading the files please wait ...