@@ -37,10 +37,9 @@ public function edit(User $user)
         $user->memberships = $user->groupMembersFromMemberable()->get();
         $groups = $this->getAllGroups();
         $permission_ids = $user->permissionAssignments()->pluck('permission_id')->toArray();
-        $all_permissions = Permission::all();
+        $all_permissions = Permission::routes()->get();
         $users_permission_ids = $this->user_permission_ids($user);
 
-
         $currentUser = $user;
         $states = JsonData::states();
         $countries = JsonData::countries();
 
@@ -217,7 +217,6 @@ public function update(Request $request, Process $process)
         $process->fill($request->except('cancel_request', 'start_request', 'cancel_request_id', 'start_request_id'));
         $process->saveOrFail();
 
-
         unset(
             $original_attributes['id'],
             $original_attributes['updated_at']
 
@@ -17,7 +17,7 @@
 
 class ProcessRequestController extends Controller
 {
-    public $skipPermissionCheckFor = ['index', 'show'];
+    public $skipPermissionCheckFor = ['index', 'show', 'store', 'destroy'];
 
     /**
      * Display a listing of the resource.
 
@@ -25,6 +25,8 @@
 
 class ProcessRequestFileController extends Controller
 {
+    public $skipPermissionCheckFor = ['index', 'store', 'update', 'destroy'];
+
     use HasMediaTrait;
     /*
     * return list of Process Request files
 
@@ -22,4 +22,15 @@ static public function byGuardName($name)
             throw new ModelNotFoundException($name . " permission does not exist");
         }
     }
+
+    /**
+     * Query filter for type = route
+     *
+     * @param \Illuminate\Database\Eloquent\Builder $query
+     * @return \Illuminate\Database\Eloquent\Builder
+     */
+    public function scopeRoutes($query)
+    {
+        return $query->where('type', 'ROUTE');
+    }
 }
@@ -5,6 +5,7 @@
 $factory->define(ProcessMaker\Models\Permission::class, function (Faker $faker) {
     return [
         'name' => $faker->sentence(2),
+        'type' => 'ROUTE',
         'guard_name' => $faker->sentence(2),
         'description' => $faker->sentence(5),
     ];
 
@@ -16,6 +16,7 @@ public function up()
         Schema::create('permissions', function (Blueprint $table) {
             $table->increments('id');
             $table->string('name');
+            $table->enum('type', ['ROUTE', 'RESOURCE']);
             $table->string('guard_name')->unique();
             $table->text('description');
             $table->timestamps();
 
@@ -46,6 +46,12 @@ class PermissionSeeder extends Seeder
         'processes.destroy',
         'processes.edit',
         'processes.show',
+        'requests.index',	
+        'requests.create',	
+        'requests.destroy',	
+        'requests.cancel',	
+        'requests.edit',	
+        'requests.show',
         'scripts.index',
         'scripts.create',
         'scripts.destroy',
@@ -58,6 +64,10 @@ class PermissionSeeder extends Seeder
         'users.show'
     ];
 
+    private $resourcePermissions = [
+        'requests'
+    ];
+
     public function run($user = null)
     {
         if (Permission::count() !== 0) {
@@ -78,9 +88,16 @@ public function run($user = null)
         ]);
 
         foreach ($this->permissions as $permissionString) {
+            $type = 'ROUTE';
+            $resource = explode('.', $permissionString)[0];
+            if (in_array($resource, $this->resourcePermissions)) {
+                $type = 'RESOURCE';
+            }
+
             $permission = factory(Permission::class)->create([
                 'name' => ucwords(preg_replace('/(\.|_)/', ' ',
                         $permissionString)),
+                'type' => $type,
                 'guard_name' => $permissionString,
             ]);
             factory(PermissionAssignment::class)->create([
Original file line number	Diff line number	Diff line change
`@@ -17,7 +17,7 @@`
`17`	`17`
`18`	`18`	`class ProcessRequestController extends Controller`
`19`	`19`	`{`
`20`		`- public $skipPermissionCheckFor = ['index', 'show'];`
	`20`	`+ public $skipPermissionCheckFor = ['index', 'show', 'store', 'destroy'];`
`21`	`21`
`22`	`22`	`/**`
`23`	`23`	`* Display a listing of the resource.`
Original file line number	Diff line number	Diff line change
`@@ -25,6 +25,8 @@`
`25`	`25`
`26`	`26`	`class ProcessRequestFileController extends Controller`
`27`	`27`	`{`
	`28`	`+ public $skipPermissionCheckFor = ['index', 'store', 'update', 'destroy'];`
	`29`	`+`
`28`	`30`	`use HasMediaTrait;`
`29`	`31`	`/*`
`30`	`32`	`* return list of Process Request files`
Original file line number	Diff line number	Diff line change
`@@ -22,4 +22,15 @@ static public function byGuardName($name)`
`22`	`22`	`throw new ModelNotFoundException($name . " permission does not exist");`
`23`	`23`	`}`
`24`	`24`	`}`
	`25`	`+`
	`26`	`+ /**`
	`27`	`+ * Query filter for type = route`
	`28`	`+ *`
	`29`	`+ * @param \Illuminate\Database\Eloquent\Builder $query`
	`30`	`+ * @return \Illuminate\Database\Eloquent\Builder`
	`31`	`+ */`
	`32`	`+ public function scopeRoutes($query)`
	`33`	`+ {`
	`34`	`+ return $query->where('type', 'ROUTE');`
	`35`	`+ }`
`25`	`36`	`}`