/**
* Handle an incoming request.
*
* @param Request $request
* @param Closure $next
* @param string $action
* @param string $resource
* @return mixed
*/
public function handle(Request $request, Closure $next, $action, $resource = null)
{
$user = $this->jwtAuth->getUser();
$lock = $this->lock->makeCallerLockAware($user);
if (!$user->can($action, $resource)) {
throw new ForbiddenException();
}
return $next($request);
}
