feat: administration page

app/Http/Controllers/AdministrationController.php

@@ -0,0 +1,38 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Models\User;
+use Illuminate\Http\Request;
+use Inertia\Inertia;
+
+class AdministrationController extends Controller
+{
+    public function index(Request $request)
+    {
+        $usersCollection = User::get()->map(function (User $user): array {
+            return [
+                'id' => $user->id,
+                'first_name' => $user->first_name,
+                'last_name' => $user->last_name,
+                'email' => $user->email,
+                'url' => [
+                    'show' => route('administration.user.show', [
+                        'user' => $user->id,
+                    ]),
+                ],
+            ];
+        });
+
+        return Inertia::render('Administration/Index', [
+            'data' => [
+                'users' => $usersCollection,
+            ],
+        ]);
+    }
+
+    public function show(Request $request, int $userId)
+    {
+        return Inertia::render('Administration/Show');
+    }
+}

app/Http/Kernel.php

@@ -2,6 +2,7 @@
 
 namespace App\Http;
 
+use App\Http\Middleware\RestrictAdministrationAccess;
 use Illuminate\Foundation\Http\Kernel as HttpKernel;
 
 class Kernel extends HttpKernel
@@ -38,6 +39,7 @@ class Kernel extends HttpKernel
             \App\Http\Middleware\VerifyCsrfToken::class,
             \Illuminate\Routing\Middleware\SubstituteBindings::class,
             \App\Http\Middleware\HandleInertiaRequests::class,
+            RestrictAdministrationAccess::class,
         ],
 
         'api' => [
@@ -67,5 +69,6 @@ class Kernel extends HttpKernel
         'signed' => \Illuminate\Routing\Middleware\ValidateSignature::class,
         'throttle' => \Illuminate\Routing\Middleware\ThrottleRequests::class,
         'verified' => \Illuminate\Auth\Middleware\EnsureEmailIsVerified::class,
+        'administration' => RestrictAdministrationAccess::class,
     ];
 }

app/Http/Middleware/RestrictAdministrationAccess.php

@@ -0,0 +1,26 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+
+class RestrictAdministrationAccess
+{
+    /**
+     * Handle an incoming request.
+     *
+     * @param  \Illuminate\Http\Request  $request
+     * @param  \Closure(\Illuminate\Http\Request): (\Illuminate\Http\Response|\Illuminate\Http\RedirectResponse)  $next
+     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
+     */
+    public function handle(Request $request, Closure $next)
+    {
+        if (Auth::user()->instance_administrator) {
+            return $next($request);
+        } else {
+            abort(401);
+        }
+    }
+}

app/Models/User.php

@@ -36,6 +36,7 @@ class User extends Authenticatable implements MustVerifyEmail
         'postal_code',
         'country',
         'state',
+        'instance_administrator',
     ];
 
     /**
@@ -57,6 +58,7 @@ class User extends Authenticatable implements MustVerifyEmail
      */
     protected $casts = [
         'email_verified_at' => 'datetime',
+        'instance_administrator' => 'boolean',
     ];
 
     /**