Laravel enable route for only the current user

Question

I have two user types admin and member. Now, members cannot view other profiles except their own. Only admins have access to all user profiles.

Now my route for the UsersController@show (only accessible by admins) is http://laravel.test/user/username

However if a user accesses that url with his own username, it should grant the request.

This applies to all other functions such as edit and update.

Now I could create another controller designated for the current user only, call it MyController. I could copy the code from the UsersController, just changing a few codes so that it gets the current user from auth(). But I would prefer not to.

Any help?

You may want to look at Laravel's Middleware to handle this. Then protect the routes you need to by add the middleware to those routes. — Marc M.
show your users table structure , and 1 sample record for admin and users — Saurabh Mistry
@MarcM. could you show me a snippet of this would be done, or at least link to a resource, I've been browsing the internet for hours, no luck. — Gerard Balaoro
@GerardBalaoro - here's the link with a complete walk through: laravel.com/docs/5.7/middleware — Marc M.

TEFO TEFO · Accepted Answer · 2018-10-11T18:04:18

if you have your own conditions you should a little change this but logic is this

public function show($username)
{
    $user = User::where('username',$username)->get();
    if($user->id == Auth::id()){
        // show profile
    }
}

Laravel enable route for only the current user

1 Answers