check() && auth()->user()->role === 'user') { return $next($request); } abort(403, 'Akses ditolak.'); } }