From 418b7a2ac629638cefdee1c74344338538a0761a Mon Sep 17 00:00:00 2001
From: Nafies Luthfi <nafiesl@gmail.com>
Date: Sat, 11 Apr 2020 22:16:04 +0800
Subject: [PATCH] Apply admin only middleware to backup restore database
 feature

---
 resources/views/layouts/partials/nav.blade.php |  4 +++-
 routes/web.php                                 | 15 ++++++++++-----
 2 files changed, 13 insertions(+), 6 deletions(-)

diff --git a/resources/views/layouts/partials/nav.blade.php b/resources/views/layouts/partials/nav.blade.php
index 00a14f3..bdfbfff 100644
--- a/resources/views/layouts/partials/nav.blade.php
+++ b/resources/views/layouts/partials/nav.blade.php
@@ -39,7 +39,9 @@
                         </a>
 
                         <ul class="dropdown-menu" role="menu">
-                            <li><a href="{{ route('backups.index') }}">{{ __('backup.list') }}</a></li>
+                            @if (is_system_admin(auth()->user()))
+                                <li><a href="{{ route('backups.index') }}">{{ __('backup.list') }}</a></li>
+                            @endif
                             <li><a href="{{ route('profile') }}">{{ __('app.my_profile') }}</a></li>
                             <li><a href="{{ route('password.change') }}">{{ __('auth.change_password') }}</a></li>
                             <li>
diff --git a/routes/web.php b/routes/web.php
index 5ab19ce..7403c45 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -50,9 +50,14 @@ Route::get('couples/{couple}/edit', ['as' => 'couples.edit', 'uses' => 'CouplesC
 Route::patch('couples/{couple}', ['as' => 'couples.update', 'uses' => 'CouplesController@update']);
 
 /**
- * Backup Restore Database Routes
+ * Admin only routes
  */
-Route::post('backups/upload', ['as' => 'backups.upload', 'uses' => 'BackupsController@upload']);
-Route::post('backups/{fileName}/restore', ['as' => 'backups.restore', 'uses' => 'BackupsController@restore']);
-Route::get('backups/{fileName}/dl', ['as' => 'backups.download', 'uses' => 'BackupsController@download']);
-Route::resource('backups', 'BackupsController');
+Route::group(['middleware' => 'admin'], function () {
+    /**
+     * Backup Restore Database Routes
+     */
+    Route::post('backups/upload', ['as' => 'backups.upload', 'uses' => 'BackupsController@upload']);
+    Route::post('backups/{fileName}/restore', ['as' => 'backups.restore', 'uses' => 'BackupsController@restore']);
+    Route::get('backups/{fileName}/dl', ['as' => 'backups.download', 'uses' => 'BackupsController@download']);
+    Route::resource('backups', 'BackupsController');
+});