autocde2.0/app/Http/Middleware/CheckPermission.php

<?php

namespace App\Http\Middleware;

use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Route;
use Spatie\Permission\Exceptions\UnauthorizedException;
use Symfony\Component\HttpFoundation\Response;
use App\Models\Enums\PermissionType;
use Symfony\Component\HttpKernel\Event\ExceptionEvent;

class CheckPermission
{
    /**
     * Handle an incoming request.`
     *
     * @param  \Closure(\Illuminate\Http\Request): (\Symfony\Component\HttpFoundation\Response)  $next
     */
    public function handle(Request $request, Closure $next): Response
    {
        $permission = Route::currentRouteName();

        $permission=$this->RouteGetType($request,$permission);

        if (!Auth::user()->hasPermissionTo($permission)) {
            throw UnauthorizedException::forPermissions([$permission]);
        }
        //检查公司是否被限制访问
        if (Auth::user()->company()->review_status == CompanyReviewStatus::REJECTED){
            throw new \Exception('Companies are restricted from accessing');
        }

        return $next($request);
    }

    public function RouteGetType(Request $request,string $permission){
        switch ($permission) {
            case 'config.index':
                $group = $request->get("group", []);
                foreach ($group as $item){
                    $permission=$this->findPermission($item);
                }
                return $permission;
                break;
            case 'config.setting':
                $group = $request->json()->all();
                if(!empty($group) && is_array($group) && isset($group[0]['group'])){
                    $permission=$this->findPermission($group[0]['group']);
                }
                return $permission;
                break;
            default:
                return $permission;
        }

    }

    public function findPermission(string $type){
        $objectType=PermissionType::tryFrom($type);
        $permissionType=$objectType->getPermissionType();
        return $permissionType;
    }
}