A flexible ACL. You can create rule sin a static (rules in code) or persistent store (rules in db). Has the ability to assign permissions to users, roles, and (soon) role groups. You can create both explicit allow an deny permissions. Users can have multiple roles, roles can inherit from other roles, and user-specific permissions supersede roles permissions. There's an interesting concept called aliases to making your checks against multiple permissions shorter. You can also create a condition where you pass a callback to the checker. There's a laravel package for lock: https://github.com/BeatSwitch/lock-laravel