user()) || !$auth->user()->isAdministrator) { throw new \Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException(); } }); Route::filter('current_user', function() { $auth = app('api.auth'); if (empty($auth->user()) || Route::input('user') != $auth->user()->email) { throw new \Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException(); } });