芝麻web文件管理V1.00

编辑当前文件:/home/qrafawbu/tblonline.org/app/Http/Middleware/Permission.php

<?php

namespace App\Http\Middleware;

use Auth;
use Closure;
use Illuminate\Http\Response;

class Permission {
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next) {
        $user      = Auth::user();
        $user_type = $user->user_type;

if ($user_type == 'customer') {
            if (!$request->ajax()) {
                return redirect('/')->with('error', _lang('Permission denied !'));
            } else {
                return new Response('<h4 class="text-center red">' . _lang('Permission denied !') . '</h4>');
            }
        }

if ($user_type != 'admin') {
            $route_name = \Request::route()->getName();

/** If User Type = User **/
            if ($route_name != '' && $user_type == 'user') {

if (explode(".", $route_name)[1] == "update") {
                    $route_name = explode(".", $route_name)[0] . ".edit";
                } else if (explode(".", $route_name)[1] == "store") {
                    $route_name = explode(".", $route_name)[0] . ".create";
                }
                if (!has_permission($route_name)) {
                    if (!$request->ajax()) {
                        return back()->with('error', _lang('Permission denied !'));
                    } else {
                        return new Response('<h4 class="text-center red">' . _lang('Permission denied !') . '</h4>');
                    }
                }
            }

}

return $next($request);
    }
}