<?php namespace App\Http\Middleware; use Closure; use Illuminate\Support\Facades\Auth; class OnlyTesters { /** * Handle an incoming request. * * @param \Illuminate\Http\Request $request * @param \Closure $next * @return mixed */ public function handle($request, Closure $next) { if (Auth::user()->role !== 'tester' && !Auth::user()->super) { abort(404); } return $next($request); } }