Update \Dashboard\Controller\{Admin,User} to restrict by permission