user())) { return $next($request); } abort(403, 'You are not authorized to perform this action.'); } }