# Part 10 - Permissions, Error pages & Profile

PREREQUISITES

WARNING

Laravel exercise -> Part 9 - Authentication was changed on 28/11/2022. If you have made the exercise before this date, please go back and take a look at the protected routes and guest navigation again.

# Permissions

Guests (e.g. students interested in some courses) can only access the home page and the courses dashboard (but the buttons 'Manage students' are not visible in the course cards)

guest courses

Authenticated users without admin rights (e.g. lecturers interested in a list of students enrolled for their course) can access the home page, the courses dashboard (with 'Manage students' buttons) and the course detail pages

lecturer courses

lecturer course detail

REMARK

In order to be able to test this behaviour, you should add a user/lecturer (e.g. Peter Peters) without admin rights to your database

Authenticated users with admin rights (e.g. programme heads, secretaries or lecturers who manage the student programmes) obviously can access all the pages that are accessible by a user without admin rights as well
On top of these functionalities, they will be able to perform some administrative tasks
- For one of these tasks, i.e. creating, updating and deleting programmes, you should add a Programmes link to the navbar. The link should only be visible to authenticated users. The programming logic behind this additional functionality is tackled in the next part of this exercise.

admin navbar

Make sure all error pages use the Student Administration layout component
- Errorpages 401, 403, 419, 429, 500 and 503
- Errorpage 404
  - Make sure login and register links don't show

error 404

Make sure your name changes immediately in the navbar when you change it using "Update profile"
Enable the use of profile pictures and show them in the navbar

navbar profile picture