is_admin == false) { return abort(403, 'You must be an administrator to do that'); } return $next($request); } }