Laravel 5.0，管理员和前端用户

我是Laravel的新手，使用的是5.0版。

我的网站将在前端有用户，显然网站将有管理员。

我面临的问题是非管理员用户也可以登录到管理面板。

如何不允许前端用户进入管理员？

也请看看我是否以正确的方式做事，如果不是，那么正确的方式是什么。

我的路线.php

如下

Route::get('home', 'HomeController@index');
Route::get('consign', 'HomeController@showConsignment');
Route::post('processConsignment', 'HomeController@processConsignment');
Route::get('login', array('uses' => 'HomeController@showLogin'));
Route::post('login', array('uses' => 'HomeController@doLogin'));
Route::get('logout', array('uses' => 'HomeController@doLogout'));
Route::controllers([
    'auth' => 'Auth'AuthController',
    'password' => 'Auth'PasswordController',
]);
// Admin area
get('admin', function () {
  return redirect('/admin/dashboard');
});
$router->group([
  'namespace' => 'Admin',
  'middleware' => 'auth',
], function () {
  resource('admin/dashboard', 'DashboardController');
  resource('admin/auction', 'AuctionController');
  resource('admin/auctionlot', 'AuctionLotController');
  resource('admin/video', 'VideoController');
});
// Logging in and out
get('/auth/login', 'Auth'AuthController@getLogin');
post('/auth/login', 'Auth'AuthController@postLogin');
get('/auth/logout', 'Auth'AuthController@getLogout');

HomeController 的相关部分如下：

public function showLogin(){
    // show the form
    return View('home.login');
}
public function doLogin(){
    // validate the info, create rules for the inputs
    $rules = array(
        'email'    => 'required|email', // make sure the email is an actual email
        'password' => 'required|alphaNum|min:3' // password can only be alphanumeric and has to be greater than 3 characters
    );
    // run the validation rules on the inputs from the form
    $validator = Validator::make(Input::all(), $rules);
    // if the validator fails, redirect back to the form
    if ($validator->fails()) {
        return Redirect::to('login')
            ->withErrors($validator) // send back all errors to the login form
            ->withInput(Input::except('password')); // send back the input (not the password) so that we can repopulate the form
    } else {
        // create our user data for the authentication
        $userdata = array(
            'email'     => Input::get('email'),
            'password'  => Input::get('password'),
            'active'    => '1',
            'role'      => 'user'
        );
        // attempt to do the login
        if (Auth::attempt($userdata)) {
            // validation successful!
            // redirect them to the secure section or whatever
            // return Redirect::to('secure');
            // for now we'll just echo success (even though echoing in a controller is bad)
            return Redirect::to('home');
        } else {        
            // validation not successful, send back to form 
            return Redirect::to('login');
        }
    }
}//doLogin

这意味着我为管理员和前端用户提供了单独的表单

我的用户表结构如下

CREATE TABLE IF NOT EXISTS `users` (
  `id` int(10) unsigned NOT NULL AUTO_INCREMENT,
  `name` varchar(255) COLLATE utf8_unicode_ci NOT NULL,
  `email` varchar(255) COLLATE utf8_unicode_ci NOT NULL,
  `password` varchar(255) COLLATE utf8_unicode_ci NOT NULL,
  `role` enum('admin','user') COLLATE utf8_unicode_ci NOT NULL DEFAULT 'user',
  `active` enum('1','0') COLLATE utf8_unicode_ci NOT NULL,
  `remember_token` varchar(100) COLLATE utf8_unicode_ci DEFAULT NULL,
  `created_at` timestamp NULL DEFAULT NULL,
  `updated_at` timestamp NULL DEFAULT NULL,
  PRIMARY KEY (`id`),
  UNIQUE KEY `users_email_unique` (`email`)
) ENGINE=InnoDB  DEFAULT CHARSET=utf8 COLLATE=utf8_unicode_ci AUTO_INCREMENT=4 ;

请帮忙。

谢谢

php artisan make:middleware AdminMiddleware

<?php namespace App'Http'Middleware;
use Closure;
class AdminMiddleware {
    /**
     * Handle an incoming request.
     *
     * @param  'Illuminate'Http'Request  $request
     * @param  'Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next)
    {
        if ($request->user()->type != 'admin') 
        {
            return redirect('home');
        }
        return $next($request);
    }
}

Route::group(['middleware' => 'App'Http'Middleware'AdminMiddleware'], function()
{
    Route::get('/admin', function()
    {
        // can only access this if type == admin
    });
});

Route::group(['middleware' => 'auth'], function()
{
   resource('admin/dashboard', 'DashboardController');
   resource('admin/auction', 'AuctionController');
   resource('admin/auctionlot', 'AuctionLotController');
   resource('admin/video', 'VideoController');
});

    $sess_array = [
        'user_role'       => $user_role, // From what you got from DB 
        'user_email'      => $user->sup_email,
        'active'          => '1',
    ];
    $request->session()->put($sess_array);

  public function handle(Request $request, Closure $next)
{
           if($request->session()->get('user_role') ! == 'admin') {
               return $next($request);
           } else {
               return redirect('login');
           }
}