can('viewAdminPath', User::class)) { abort(403, 'Unauthorized action.'); } return $next($request); } }