/** * Determine if the user is authorized to make this request. * * @param Sentinel $user * @return bool * @author Bertrand Kintanar */ public function authorize(Sentinel $user) { $user = $user::getUser(); $permission = str_replace('/', '.', Request::path()); // View if (Request::isMethod('get')) { return $user->hasAccess($permission . '.view'); } else { if (Request::isMethod('post')) { return $user->hasAccess($permission . '.create'); } } }