diff --git a/public/DataUser/data-user.xlsx b/public/DataUser/data-user.xlsx
index a0c8451..43a1168 100644
Binary files a/public/DataUser/data-user.xlsx and b/public/DataUser/data-user.xlsx differ
diff --git a/routes/web.php b/routes/web.php
index 958531d..4cd0007 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -71,8 +71,9 @@
 Route::get('/reset-password/{token}', [AuthController::class, 'showResetForm'])->name('password.reset');
 Route::post('/reset-password', [AuthController::class, 'resetPassword'])->name('password.update');
 
-Route::middleware(['auth','web'])->group(function () {
-    Route::resource('/dashboard', DashboardController::class);
+Route::middleware(['auth', 'web'])->group(function () {
+    // Routes yang dapat diakses oleh semua pengguna yang sudah login
+    Route::get('/dashboard', [DashboardController::class, 'index'])->name('dashboard.index');
 
     Route::get('/user-profile', function () {
         if (!Auth::check()) {
@@ -80,38 +81,39 @@
         }
         return view('user.user-profile');
     })->name('user-profile');
+
     Route::post('/user-profile', [UserController::class, 'update_profile']);
-
-    Route::post('/update-profile-picture', [UserController::class, 'updateProfilePicture'])
-            ->name('update-profile-picture');
-
+    Route::post('/update-profile-picture', [UserController::class, 'updateProfilePicture'])->name('update-profile-picture');
     Route::post('/update-password', [UserController::class, 'updatePassword'])->name('update-password');
 
-    Route::resource('ekstrakurikuler', ExtracurricularController::class);
-
-    Route::resource('kriteria', CriteriaController::class);
-    // Route::post('/kriteria/calculate', [CriteriaController::class, 'calculateBobotKriteria'])->name('kriteria.calculate');
-
-    Route::resource('subkriteria', SubCriteriaController::class);
-    // Route::post('/subkriteria/calculate', [SubCriteriaController::class, 'calculateBobotSubKriteria'])->name('subkriteria.calculate');
-
-    Route::resource('user', DataUserController::class);
-    Route::get('/export-user',[DataUserController::class, 'userexport'])->name('export-user');
-    Route::post('/import-user',[DataUserController::class, 'userimport'])->name('import-user');
-    Route::get('/download-user-template', [DataUserController::class, 'downloadUserTemplate'])->name('download-user-template');
-
-    Route::post('/kriteria/calculate', [PerhitunganController::class, 'calculateBobotKriteria'])->name('kriteria.calculate');
-    Route::post('/subkriteria/calculate', [PerhitunganController::class, 'calculateBobotSubKriteria'])->name('subkriteria.calculate');
-    Route::get('input-nilai', [PerhitunganController::class, 'penilaian'])->name(('penilaian.input-nilai'));
-    Route::post('transformasi-nilai', [PerhitunganController::class, 'transformasiNilai'])->name('transformasiNilai');
-    Route::post('nilai-utility', [PerhitunganController::class, 'nilaiUtility'])->name('nilaiUtility');
-    Route::post('nilai-akhir', [PerhitunganController::class, 'nilaiAkhir'])->name('nilaiAkhir');
-    Route::post('perangkingan', [PerhitunganController::class, 'perangkingan'])->name('perangkingan');
-
     Route::post('/riwayat-hasil', [PerhitunganController::class, 'getRiwayatHasil'])->name('riwayat.hasil');
     Route::get('/riwayat-hasil', [PerhitunganController::class, 'getRiwayatHasil'])->name('riwayat.hasil');
 
     Route::get('/logout', [AuthController::class, 'logout'])->name('logout');
     Route::post('/logout', [AuthController::class, 'logout'])->name('logout');
 
+    // Group middleware untuk admin
+    Route::middleware('role:admin')->group(function () {
+        // Routes yang hanya dapat diakses oleh admin
+        Route::resource('ekstrakurikuler', ExtracurricularController::class);
+        Route::resource('kriteria', CriteriaController::class);
+        Route::resource('subkriteria', SubCriteriaController::class);
+        Route::resource('user', DataUserController::class);
+        Route::get('/export-user',[DataUserController::class, 'userexport'])->name('export-user');
+        Route::post('/import-user',[DataUserController::class, 'userimport'])->name('import-user');
+        Route::get('/download-user-template', [DataUserController::class, 'downloadUserTemplate'])->name('download-user-template');
+        Route::post('/kriteria/calculate', [PerhitunganController::class, 'calculateBobotKriteria'])->name('kriteria.calculate');
+        Route::post('/subkriteria/calculate', [PerhitunganController::class, 'calculateBobotSubKriteria'])->name('subkriteria.calculate');
+    });
+
+    // Group middleware untuk siswa
+    Route::middleware('role:siswa')->group(function () {
+        // Routes yang hanya dapat diakses oleh siswa
+        Route::get('input-nilai', [PerhitunganController::class, 'penilaian'])->name(('penilaian.input-nilai'));
+        Route::post('transformasi-nilai', [PerhitunganController::class, 'transformasiNilai'])->name('transformasiNilai');
+        Route::post('nilai-utility', [PerhitunganController::class, 'nilaiUtility'])->name('nilaiUtility');
+        Route::post('nilai-akhir', [PerhitunganController::class, 'nilaiAkhir'])->name('nilaiAkhir');
+        Route::post('perangkingan', [PerhitunganController::class, 'perangkingan'])->name('perangkingan');
+    });
+
 });