CheckPermission.php

<?php
namespace App\Http\Middleware;
use Closure;
class CheckPermission
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        $aclInstance = app()->make("Acl");
        $Response = app()->make("Response");
        
        $resource =$this->getResource($request);
        
        if($request->user()) {
            
            $userRole = $request->user()->role;
            
            do {
                if($aclInstance->isAllowed($userRole->role_slug, $resource)) {
                    return  $next($request);
                }
            }
            while($userRole = $userRole->parents);
            
            return $Response::view('errors.403', array(), 403);
        } else {
            if($aclInstance->isAllowed("guest", $resource)) {
                return  $next($request);
            } else {
                return redirect()->route("Home");
            }
        }
    }

    function getResource(&$request) {
        return $request->route()->getAction()["as"];
    }
}