FEATURE #2048: prepare routes for ACL, add some more permissions

routes/admin/widgets.php

@@ -4,25 +4,31 @@ Route::group(['namespace' => 'Widgets'], function () {
 
     // list of all installed widget types
     Route::get('widgets', 'WidgetsOverview@index')
-         ->name('widgets.overview');
+         ->name('widgets.overview')
+         ->middleware('can:update,' . \App\Models\Widgets\Widget::class);
 
     // create new instance of widget of given type
     Route::get('widgets/new/{widgetType}', 'CreateNewWidget@getNew')
-         ->name('widgets.new');
+         ->name('widgets.new')
+         ->middleware('can:create,' . \App\Models\Widgets\Widget::class);
 
     Route::post('widgets/new/{widgetType}', 'CreateNewWidget@postNew')
-         ->name('widgets.postNew');
+         ->name('widgets.postNew')
+         ->middleware('can:createf,' . \App\Models\Widgets\Widget::class);
 
     // edit widget settings
     Route::get('widgets/edit/{widget}', 'EditWidget@getEdit')
-         ->name('widgets.edit');
+         ->name('widgets.edit')
+         ->middleware('can:update,widget');
 
     // delete widget settings
     Route::get('widgets/delete/{widget}', 'EditWidget@deleteWidget')
-         ->name('widgets.delete');
+         ->name('widgets.delete')
+         ->middleware('can:delete,widget');
 
     Route::post('widgets/edit/{widget}', 'EditWidget@postEdit')
-         ->name('widgets.postEdit');
+         ->name('widgets.postEdit')
+         ->middleware('can:update,widget');
 
     // display form for association of widget and widget area
     Route::get('widgets/associate/{widgetArea}', 'AssociateWidget@getList')