pop-nav
is a component for managing and rendering an HTML navigation tree. It includes support for
injecting ACL functionality to display only the certain branches of the navigation tree that the
current user role is allowed to access. For that, the pop-acl
component is used.
pop-nav
is a component of the Pop PHP Framework.
Install pop-nav
using Composer.
composer require popphp/pop-nav
Or, require it in your composer.json file
"require": {
"popphp/pop-nav" : "^4.1.3"
}
First, you can define the navigation tree:
$tree = [
[
'name' => 'Users',
'href' => '/users',
'children' => [
[
'name' => 'Roles',
'href' => 'roles'
],
[
'name' => 'Config',
'href' => 'config'
]
]
],
[
'name' => 'Orders',
'href' => '/orders'
]
];
Then you can pass that to the nav object and render the nav:
$nav = new Nav($tree);
echo $nav;
<nav>
<nav>
<a href="/users">Users</a>
<nav>
<nav>
<a href="/users/roles">Roles</a>
</nav>
<nav>
<a href="/users/config">Config</a>
</nav>
</nav>
</nav>
<nav>
<a href="/orders">Orders</a>
</nav>
</nav>
You have a significant amount of control over the branch nodes and attributes via a configuration array:
$config = [
'top' => [
'node' => 'nav',
'id' => 'main-nav'
],
'parent' => [
'node' => 'nav',
'id' => 'nav',
'class' => 'level'
],
'child' => [
'node' => 'nav',
'id' => 'menu',
'class' => 'item'
],
'on' => 'link-on',
'off' => 'link-off',
'indent' => ' '
];
Using the same navigation tree from above, you can then create and render your nav object with the config:
use Pop\Nav\Nav;
$nav = new Nav($tree, $config);
echo $nav;
<nav id="main-nav">
<nav id="menu-1" class="item-1">
<a href="/users" class="link-off">Users</a>
<nav id="nav-2" class="level-2">
<nav id="menu-2" class="item-2">
<a href="/users/roles" class="link-off">Roles</a>
</nav>
<nav id="menu-3" class="item-2">
<a href="/users/config" class="link-off">Config</a>
</nav>
</nav>
</nav>
<nav id="menu-4" class="item-1">
<a href="/orders" class="link-off">Orders</a>
</nav>
</nav>
First, let's set up the ACL object with some roles and resources:
use Pop\Acl\Acl;
use Pop\Acl\AclRole as Role;
use Pop\Acl\AclResource as Resource;
$acl = new Acl();
$admin = new Role('admin');
$editor = new Role('editor');
$acl->addRoles([$admin, $editor]);
$acl->addResource(new Resource('config'));
$acl->allow('admin');
$acl->deny('editor', 'config');
And then we add the ACL rules to the navigation tree:
$tree = [
[
'name' => 'Home',
'href' => '/home',
'children' => [
[
'name' => 'Users',
'href' => 'users'
],
[
'name' => 'Config',
'href' => 'config',
'acl' => [
'resource' => 'config'
]
]
]
],
[
'name' => 'Orders',
'href' => '/orders'
]
];
We then inject the ACL object into the navigation object, set the current role and render the navigation:
$nav = new Nav($tree);
$nav->setAcl($acl);
$nav->setRole($editor);
echo $nav;
<nav>
<nav>
<a href="/home">Home</a>
<nav>
<nav>
<a href="/home/users">Users</a>
</nav>
</nav>
</nav>
<nav>
<a href="/orders">Orders</a>
</nav>
</nav>
Because the 'editor' role is denied access to the config
page, that nav branch is not rendered. However,
if the role is set to $admin
, the config
branch renders:
$nav = new Nav($tree);
$nav->setAcl($acl);
$nav->setRole($admin);
echo $nav;
<nav>
<nav>
<a href="/home">Home</a>
<nav>
<nav>
<a href="/home/users">Users</a>
</nav>
<nav>
<a href="/home/config">Config</a>
</nav>
</nav>
</nav>
<nav>
<a href="/orders">Orders</a>
</nav>
</nav>