FEATURE #1387: divide routes into groups - one for admin, the rest for other users

app/Http/routes.php

@@ -28,22 +28,55 @@ Route::group([
                  'prefix'     => 'admin'
              ], function () {
 
+    // these routes are available only for user with role admin
+    Route::group(['middleware' => 'onlyAdmin'], function () {
+        // display form for creating new user
+        Route::get('users/new', 'CreateNewUser@getNewUser')
+             ->name('users.new');
+
+        // POST methods
+        // display form for creating new user
+        Route::post('users/new', 'CreateNewUser@postRegistration')
+             ->name('users.newPost');
+
+        // display form for edit of existing user
+        Route::get('users/edit/{id}', 'EditUser@getEditExistingUser')
+             ->name('users.edit');
+
+        // form for adding new custom field
+        Route::get('customfields/new', 'CreateNewCustomField@getNew')
+             ->name('customfields.new');
+
+        // form for editing custom field
+        Route::get('customfields/edit/{id}', 'EditCustomField@getEditCustomField')
+             ->name('customfields.edit');
+
+        // form for adding new custom field
+        Route::post('customfields/new', 'CreateNewCustomField@postNew')
+             ->name('customfields.newPost');
+
+        // form for editing custom field
+        Route::post('customfields/edit/{id}', 'EditCustomField@postEditCustomField')
+             ->name('customfields.editPost');
+
+        Route::get('customfields/delete/{id}', 'EditCustomField@deleteCustomField')
+             ->name('customfields.delete');
+    });
+
+    // these routes are available for all logged (authenticated) users
+
     // display dashboard with some usefull information
     Route::get('/', 'Dashboard@getIndex')
          ->name('admin.dashboard');
 
-    // display form for creating new user
-    Route::get('users/new', 'CreateNewUser@getNewUser')
-         ->name('users.new');
-
-    // display form for edit of existing user
-    Route::get('users/edit/{id}', 'EditUser@getEditExistingUser')
-         ->name('users.edit');
-
     // display user detail in admin
     Route::get('users/detail/{id?}', 'UserDetail@getDetail')
          ->name('users.detail');
 
+    // method for saving edited data of user
+    Route::post('users/edit/{id}', 'EditUser@postEdit')
+         ->name('users.editPost');
+
     // display list of all users registered into our system
     Route::get('users/overview/{state?}/{perPage?}', 'UsersOverview@getOverview')
          ->name('users.overview');
@@ -55,25 +88,6 @@ Route::group([
     Route::get('customfields/overview', 'CustomFieldsOverview@getOverview')
          ->name('customfields.overview');
 
-    // form for adding new custom field
-    Route::get('customfields/new', 'CreateNewCustomField@getNew')
-         ->name('customfields.new');
-
-    // form for editing custom field
-    Route::get('customfields/edit/{id}', 'EditCustomField@getEditCustomField')
-         ->name('customfields.edit');
-
-    // form for adding new custom field
-    Route::post('customfields/new', 'CreateNewCustomField@postNew')
-         ->name('customfields.newPost');
-
-    // form for editing custom field
-    Route::post('customfields/edit/{id}', 'EditCustomField@postEditCustomField')
-         ->name('customfields.editPost');
-
-    Route::get('customfields/delete/{id}', 'EditCustomField@deleteCustomField')
-         ->name('customfields.delete');
-
     // logout method
     Route::get('logout', function () {
 
@@ -84,14 +98,6 @@ Route::group([
         return redirect()
             ->route('login')
             ->with('success', trans('admin/common.logoutSuccessfull'));
-    })->name('logout');
-
-    // POST methods
-    // display form for creating new user
-    Route::post('users/new', 'CreateNewUser@postRegistration')
-         ->name('users.newPost');
-
-    // method for saving edited data of user
-    Route::post('users/edit/{id}', 'EditUser@postEdit')
-         ->name('users.editPost');
+    })
+         ->name('logout');
 });