app/Http/Middleware/CheckIsAdmin.php
<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Support\Facades\Auth;
use Illuminate\Auth\Access\AuthorizationException;
class CheckIsAdmin
{
/**
* Handle an incoming request.
*
* @param \Illuminate\Http\Request $request
* @param \Closure $next
* @return mixed
*/
public function handle($request, Closure $next)
{
if (! (Auth::user()->isAdmin)) {
throw new AuthorizationException('you do not have admin permissions');
}
return $next($request);
}
}