Merge pull request #22 from MrCrayon/check-permission

Check browse_hooks permission

src/Controllers/HooksController.php

@@ -6,6 +6,7 @@
 use Illuminate\Http\Request;
 use Illuminate\Routing\Controller;
 use Larapack\Hooks\Hooks;
+use TCG\Voyager\Facades\Voyager;
 
 class HooksController extends Controller
 {
@@ -20,6 +21,9 @@ public function __construct(Hooks $hooks, Request $request)
 
     public function index()
     {
+        // Check permission
+        Voyager::canOrFail('browse_hooks');
+
         $lastUpdated = $this->hooks->getLastRemoteCheck();
 
         if (is_null($lastUpdated)) {
@@ -36,6 +40,9 @@ public function index()
 
     public function install()
     {
+        // Check permission
+        Voyager::canOrFail('browse_hooks');
+
         $name = $this->request->get('name');
         $this->hooks->install($name);
 
@@ -44,27 +51,39 @@ public function install()
 
     public function uninstall($name)
     {
+        // Check permission
+        Voyager::canOrFail('browse_hooks');
+
         $this->hooks->uninstall($name);
 
         return $this->redirect("Hook [{$name}] have been uninstalled!");
     }
 
     public function update($name)
     {
+        // Check permission
+        Voyager::canOrFail('browse_hooks');
+
         $this->hooks->update($name);
 
         return $this->redirect("Hook [{$name}] have been updated!");
     }
 
     public function enable($name)
     {
+        // Check permission
+        Voyager::canOrFail('browse_hooks');
+
         $this->hooks->enable($name);
 
         return $this->redirect("Hook [{$name}] have been enabled!");
     }
 
     public function disable($name)
     {
+        // Check permission
+        Voyager::canOrFail('browse_hooks');
+
         $this->hooks->disable($name);
 
         return $this->redirect("Hook [{$name}] have been disabled!");