fix: allow single-segment user permissions

Signed-off-by: memleakd <121398829+memleakd@users.noreply.github.com>

Author: memleakd

docs/quick_start_guide/using_authorization.md

@@ -22,7 +22,7 @@ When a user registers on your site, they are assigned the group specified at `Co
 
 ### Change Available Permissions
 
-The permissions on the site are stored in the `AuthGroups` config file also. Each one is defined by a string with dot-separated segments, like `users.create` or `forum.posts.create`.
+The permissions on the site are stored in the `AuthGroups` config file also. Permissions are usually written with dot-separated segments, like `users.create` or `forum.posts.create`, but single-segment permissions are also allowed.
 
 ```php
 public array $permissions = [

docs/references/authorization.md

@@ -36,8 +36,8 @@ public string $defaultGroup = 'user';
 ## Defining Available Permissions
 
 Permissions that can be assigned directly to users must be added to the `AuthGroups` config file.
-A permission is a string consisting of dot-separated segments, like `users.create` or
-`forum.posts.create`. Each permission can have a description for display within UIs if needed.
+A permission is a string, usually written with dot-separated segments like `users.create` or
+`forum.posts.create`. Single-segment permissions are also allowed. Each permission can have a description for display within UIs if needed.
 
 ```php
 public array $permissions = [

src/Authorization/Traits/Authorizable.php

@@ -16,7 +16,6 @@
 use CodeIgniter\I18n\Time;
 use CodeIgniter\Shield\Authorization\AuthorizationException;
 use CodeIgniter\Shield\Authorization\PermissionMatcher;
-use CodeIgniter\Shield\Exceptions\LogicException;
 use CodeIgniter\Shield\Models\GroupModel;
 use CodeIgniter\Shield\Models\PermissionModel;
 
@@ -256,7 +255,7 @@ public function hasPermission(string $permission): bool
      * Checks user permissions and their group permissions
      * to see if the user has one or more permissions.
      *
-     * @param string $permissions Dot-separated permission string(s), like `users.create`
+     * @param string $permissions Permission string(s), usually dot-separated like `users.create`
      */
     public function can(string ...$permissions): bool
     {
@@ -270,14 +269,6 @@ public function can(string ...$permissions): bool
         $matrix = setting('AuthGroups.matrix');
 
         foreach ($permissions as $permission) {
-            // Permission must contain at least two dot-separated segments.
-            if (! str_contains($permission, '.')) {
-                throw new LogicException(
-                    'A permission must be a dot-separated string, like `users.create`.'
-                    . ' Invalid permission: ' . $permission,
-                );
-            }
-
             $permission = strtolower($permission);
 
             // Check user's permissions

tests/Authorization/AuthorizableTest.php

@@ -15,7 +15,6 @@
 
 use CodeIgniter\I18n\Time;
 use CodeIgniter\Shield\Authorization\AuthorizationException;
-use CodeIgniter\Shield\Exceptions\LogicException;
 use CodeIgniter\Shield\Models\UserModel;
 use Locale;
 use Tests\Support\DatabaseTestCase;
@@ -353,12 +352,22 @@ public function testCanChecksLaterPermissionsWithoutGroups(): void
         $this->assertTrue($this->user->can('beta.access', 'admin.access'));
     }
 
-    public function testCanGetsInvalidPermission(): void
+    public function testCanChecksSingleSegmentPermission(): void
     {
-        $this->expectException(LogicException::class);
-        $this->expectExceptionMessage('Invalid permission: developer');
+        $this->addConfigPermissions([
+            'developer' => 'Can access developer tools',
+        ]);
 
-        $this->user->addGroup('superadmin');
+        $this->user->addPermission('developer');
+
+        $this->assertTrue($this->user->can('developer'));
+    }
+
+    public function testCanChecksSingleSegmentGroupPermission(): void
+    {
+        $this->setGroupPermissions('developer', ['developer']);
+
+        $this->user->addGroup('developer');
 
         $this->assertTrue($this->user->can('developer'));
     }