如何限制用户在laravel 5.4中访问我的应用程序的某些部分

Question

I have different type of users in my application. Ex: Super Admin, Client, Staff and HR. Now I want to give all access to Super Admin and some for Client and some for Staff and some for HR also.

Lets say I have 3 section a) Manage Staff b) Manage Clients c) Manage Projects d) Manage Designation

Now I want to give access super admin a,b,c & d And for Client only C And For Staff Only c & d And for HR only a.

I have done it by checking the User type form my user table. (Not Right Way)

Lets Say I have a URL localhost/myApp/staff [ this can be access by Super Admin] But when I logged in as Client and I hit the above URL then He/She is able to get the list of staffs, Which I want to restrict and redirect back him with some message.

How can I achive this in Laravel 5.4. Thanks in advance.

Answer 1

In the function for the staff url check the type of user:

function staff(){
    if(Auth::user ! = 'super-admin')
        return redirect('/')
    }
    else{
       //show the staff
    }