我如何在 Controller 索引 Laravel 7 中检查身份验证

Question

everyone, I am fairly new to laravel I am currently working on a HR System project and I am creating a Leave managment where the user employee can ask for a leave of sort and the manager and admin can accept or deny it and it was going pretty well until at some point i dont know why but the user can still see what the admin should see he can still enter through the link even when the files are in the admin folder so i tried to do an if with Auth but it wasnt working and its giving me this error

"Trying to get property 'role_id' of non-object"

This is the code im using for the if in the index

LeaveController

public function index()
    {
        $leaves = Leave::latest()->get();

       if(Auth::user()->role_id == 1){
        return view('/home');
       }
       elseif(Auth::user()->role_id == 2){
        return view('admin/leave/index', compact('leaves'));
       }
       else{
           return view('admin/leave/index', compact('leaves'));
       }
        
    }

Employee has a role based id 1 and Manager has role id of 2 but the super admin doesnt have it he just exists like a default admin with all permissions thats why i just left it at else

Answer 1

If you have check if someone is an admin to continue the page you can make a middleware.

php artisan make:middleware CheckAdmin

Route::get('admin/profile', function () {
    //
})->middleware('Admin');

and on the web.php file attach the middleware to the route.

Check the laravel docs for detailed information https://laravel.com/docs/7.x/middleware