Middleware & Security

Protect routes using roles and permissions middleware.

Permission Middleware

Route::get('/admin/users', function () {
    // Admin users page
})->middleware('permission:manage users');

Role Middleware

Route::get('/admin', function () {
    // Admin panel
})->middleware('role:admin');

Code Verification

// Verify permissions
if ($user->hasPermissionTo('manage users')) {
    // Allow access
}

// Verify roles
if ($user->hasRole('admin')) {
    // Allow access
}