Workspace
Permissions
Granular access control
Workel has a comprehensive permission system spanning workspace-level, project-level, and global permissions. Permissions are enforced on both the backend (Laravel policies) and frontend (useCan hooks).
What you can do
Workspace permissionsCREATE_PROJECT, DELETE_PROJECT, ADD_REMOVE_MEMBERS, MANAGE_BILLING, DELETE_WORKSPACE, and more
Project permissionsPer-feature gates for Kanban (VIEW_BOARDS, CREATE_TASK, EDIT_TASK, DELETE_TASK), Files (UPLOAD, DELETE_OWN, DELETE_ANY), Chat, Calendar
Global permissionsCREATE_GROUP_MESSAGE, VIEW_ALL_EVENTS, VIEW_ALL_ACTIVITY, POST_ACTIVITY, MANAGE_CATEGORIES
Backend enforcementLaravel Policies on every API endpoint; broadcast channel auth for real-time events
Frontend gatesUseCan() hook, <PermissionGuard>, <RoleGuard>, <IfAllowed> components hide UI for unauthorized actions
Data isolationWorkspace-scoped queries prevent cross-tenant data access; Members only see their assigned projects