Laravel Episode 9: Middleware Roles

php artisan make:migration create_staff_role_and_default_new_user

public function up()
{
    // create new staff role
    DB::table('roles')->insert(
        [
            'id'                 => 2,
            'role_name'          => 'staff'
        ]
    );

    // create default user for staff
    DB::table('users')->insert(
        [
            'username'      => 'staff',
            'email'         => 'staff@test.com',
            'password'      => Hash::make('password'),
            'role_id'       => 2,
            'created_at'    => CarbonCarbon::now()->toDateTimeString(),
            'updated_at'    => CarbonCarbon::now()->toDateTimeString()
        ]
    );
}

public function down()
{
    // delete staff user account
    DB::table('users')->where('username', 'staff')->delete();

    // delete staff role
    DB::table('roles')->where('id', '2')->delete();
}

php artisan make:middleware RoleMiddleware

use User;
use Auth;
use Redirect;

public static function userHasRole($role_name)
{
    if (Auth::check())
    {
        $check_role = User::select('roles.role_name')
            ->join('roles', 'roles.id', '=', 'users.role_id')
            ->where('users.id', Auth::User()->id)
            ->where('roles.role_name', $role_name)
            ->first();
        if ($check_role)
        {
            return true;
        }else{
            return false;
        }
    }

    return false;
}

use AppModelsRole;
use Redirect;

public function handle($request, Closure $next, $role)
{
    // check if user has role being checked
    if (! Role::userHasRole($role))
    {
        // redirect to access denied page
        return back()->with('error', 'Access Denied');
    }

    return $next($request);
}

'role' => AppHttpMiddlewareRoleMiddleware::class,

public function __construct()
{
    $this->middleware('role:admin');
}