isMethod('get')) { return $next($request); } /* @var User $user */ $user = $request->user(getGuardName()); if (! $user->can()) { throw new PermissionForbidden(); } return $next($request); } }