Merge pull request #221 from NottingHack/meta-permissions

Meta: protect routes with permissions

Author: geeksareforlife

app/Http/Controllers/MetaController.php

@@ -19,6 +19,9 @@ class MetaController extends Controller
     public function __construct(MetaRepository $metaRepository)
     {
         $this->metaRepository = $metaRepository;
+
+        $this->middleware('can:meta.view')->only(['index']);
+        $this->middleware('can:meta.edit')->only(['edit', 'update']);
     }
 
     /**

resources/views/meta/index.blade.php

@@ -16,7 +16,11 @@
         <tr>
             <td>{{ $meta->getKey() }}</td>
             <td>{{ $meta->getValue() }}</td>
-            <td><a href="{{ route('metas.edit', $meta->getKey()) }}">Edit</a></td>
+            <td>
+            @can('meta.edit')
+                <a href="{{ route('metas.edit', $meta->getKey()) }}">Edit</a>
+            @endcan
+            </td>
         </tr>
     @endforeach
     </tbody>