Only admins can change ticket status

app/Http/Requests/ChangeTicketStatus.php

@@ -7,6 +7,17 @@ use Illuminate\Foundation\Http\FormRequest;
 
 class ChangeTicketStatus extends FormRequest
 {
+    /**
+     * Determine if the user is authorized to make this request.
+     *
+     * @return bool
+     */
+    public function authorize()
+    {
+        return auth()->check() and
+            auth()->user()->role === 1;
+    }
+
     /**
      * Get the validation rules that apply to the request.
      *