somewhere

middleware/permissions.js

@@ -0,0 +1,16 @@
+export default async function ({ $auth, redirect, route }) {
+  try {
+    if (route.name === 'admin') {
+      return true
+    } else {
+      let hasPermission = false
+      for await (const permission of $auth.user.permissions) {
+        if ((await route.name.includes(permission)) && permission !== '') hasPermission = true
+      }
+      if (hasPermission) return true
+      else redirect('/admin')
+    }
+  } catch (e) {
+    redirect('/admin')
+  }
+}