| @@ 6-49 (lines=44) @@ | ||
| 3 | use Closure; |
|
| 4 | use Illuminate\Contracts\Auth\Guard; |
|
| 5 | ||
| 6 | class AuthorizeAdmin { |
|
| 7 | ||
| 8 | /** |
|
| 9 | * The Guard implementation. |
|
| 10 | * |
|
| 11 | * @var Guard |
|
| 12 | */ |
|
| 13 | protected $auth; |
|
| 14 | ||
| 15 | /** |
|
| 16 | * Create a new filter instance. |
|
| 17 | * |
|
| 18 | * @param Guard $auth |
|
| 19 | * @return void |
|
| 20 | */ |
|
| 21 | public function __construct(Guard $auth) |
|
| 22 | { |
|
| 23 | $this->auth = $auth; |
|
| 24 | } |
|
| 25 | ||
| 26 | /** |
|
| 27 | * Handle an incoming request. |
|
| 28 | * |
|
| 29 | * @param \Illuminate\Http\Request $request |
|
| 30 | * @param \Closure $next |
|
| 31 | * @return mixed |
|
| 32 | */ |
|
| 33 | public function handle($request, Closure $next) |
|
| 34 | { |
|
| 35 | $user = $this->auth->user(); |
|
| 36 | if ($user->hasRole('admin')) |
|
| 37 | { |
|
| 38 | return $next($request); |
|
| 39 | } |
|
| 40 | ||
| 41 | if ($request->ajax()) |
|
| 42 | { |
|
| 43 | return response('Unauthorized.', 401); |
|
| 44 | } |
|
| 45 | ||
| 46 | return redirect()->route('home'); |
|
| 47 | } |
|
| 48 | ||
| 49 | } |
|
| 50 | ||
| @@ 6-49 (lines=44) @@ | ||
| 3 | use Closure; |
|
| 4 | use Illuminate\Contracts\Auth\Guard; |
|
| 5 | ||
| 6 | class AuthorizeEditor { |
|
| 7 | ||
| 8 | /** |
|
| 9 | * The Guard implementation. |
|
| 10 | * |
|
| 11 | * @var Guard |
|
| 12 | */ |
|
| 13 | protected $auth; |
|
| 14 | ||
| 15 | /** |
|
| 16 | * Create a new filter instance. |
|
| 17 | * |
|
| 18 | * @param Guard $auth |
|
| 19 | * @return void |
|
| 20 | */ |
|
| 21 | public function __construct(Guard $auth) |
|
| 22 | { |
|
| 23 | $this->auth = $auth; |
|
| 24 | } |
|
| 25 | ||
| 26 | /** |
|
| 27 | * Handle an incoming request. |
|
| 28 | * |
|
| 29 | * @param \Illuminate\Http\Request $request |
|
| 30 | * @param \Closure $next |
|
| 31 | * @return mixed |
|
| 32 | */ |
|
| 33 | public function handle($request, Closure $next) |
|
| 34 | { |
|
| 35 | $user = $this->auth->user(); |
|
| 36 | if ($user->hasRole('editor') || $user->hasRole('admin')) |
|
| 37 | { |
|
| 38 | return $next($request); |
|
| 39 | } |
|
| 40 | ||
| 41 | if ($request->ajax()) |
|
| 42 | { |
|
| 43 | return response('Unauthorized.', 401); |
|
| 44 | } |
|
| 45 | ||
| 46 | return redirect()->route('home'); |
|
| 47 | } |
|
| 48 | ||
| 49 | } |
|
| 50 | ||