将页面限制为管理员 - Laravel

Question

I am having a tutorial on how to restrict pages to admins. In my RedirectIfAuthenticated.php, this is how my code looks like

public function handle($request, Closure $next, $guard = null)
{
    if (!Auth::guard($guard)->check()) {
        // return redirect('/login');
    } else {
        $user = Auth::user();
        if($user->hasRole('manager')) {
            return redirect('admin/home');
        } else {
            return redirect('/home');
        }
    }

    return $next($request);
}

After i login, i am routed to the respective pages but the issue is, i can still route to the admin page even tho i login as a member and not manager. When i place localhost/admin/home, i am still routed to that page although i am not a manager. What am i missing out?

Answer 1

I would suggest to take a look at https://www.learn2torials.com/a/laravel-authentication-based-on-roles tutorial to resolve this issue.

You have to use different middlewares based on your user types to handle their permissions