Introduction
The checkbox column allows you to render a checkbox inside the table, which can be used to update that database record without needing to open a new page or a modal:Lifecycle hooks
Hooks may be used to execute code at various points within the checkbox’s lifecycle:Security
Authorization
Checkbox columns do not automatically check model policies. Without an authorization check, users can update the column for records accessible through the table query, even if the record’supdate() policy denies access to its edit page. Use disabled() with your authorization logic, for example disabled(fn ($record) => $record->user_id !== auth()->id()). Filament checks this condition on the server before saving.
Check permission for the specific attribute being changed, especially sensitive attributes such as administrator access. If the column updates a related model or pivot, authorize that operation too. Alternatively, use a resource edit page or a policy-backed EditAction to apply the resource’s edit authorization.