BookStack Code Mirror - bookstack/blob - app/Http/Middleware/PermissionMiddleware.php

   1 <?php
   2
   3 namespace BookStack\Http\Middleware;
   4
   5 use Closure;
   6
   7 class PermissionMiddleware
   8 {
   9     /**
  10      * Handle an incoming request.
  11      *
  12      * @param \Illuminate\Http\Request $request
  13      * @param \Closure                 $next
  14      * @param                          $permission
  15      *
  16      * @return mixed
  17      */
  18     public function handle($request, Closure $next, $permission)
  19     {
  20         if (!$request->user() || !$request->user()->can($permission)) {
  21             session()->flash('error', trans('errors.permission'));
  22
  23             return redirect()->back();
  24         }
  25
  26         return $next($request);
  27     }
  28 }