diff --git a/app/Enums/UserRole.php b/app/Enums/UserRole.php
new file mode 100644
index 0000000..100ee94
--- /dev/null
+++ b/app/Enums/UserRole.php
@@ -0,0 +1,17 @@
+<?php
+
+namespace App\Enums;
+
+use App\Traits\WithValueEnum;
+
+enum UserRole: string
+{
+    use WithValueEnum;
+
+    case Developer = 'Developer';
+    case Owner = 'Owner';
+    case Leader = 'Leader';
+    case Admin = 'Admin';
+    case Partner = 'Partner';
+    case Customer = 'Customer';
+}
diff --git a/app/Livewire/Datatable/Studio/Catalog/BottlesTable.php b/app/Livewire/Datatable/Studio/Catalog/BottlesTable.php
index 7a834bb..ac0f262 100644
--- a/app/Livewire/Datatable/Studio/Catalog/BottlesTable.php
+++ b/app/Livewire/Datatable/Studio/Catalog/BottlesTable.php
@@ -63,15 +63,19 @@ public function columns(): array
                 ->label(function ($row) {
                     $actions = '';
 
-                    $actions .= view('components.datatables.edit', [
-                        'id' => $row->id,
-                        'editRoute' => route('studio.catalog.bottle.edit', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('update bottle')) {
+                        $actions .= view('components.datatables.edit', [
+                            'id' => $row->id,
+                            'editRoute' => route('studio.catalog.bottle.edit', $row->id),
+                        ])->render();
+                    }
 
-                    $actions .= view('components.datatables.delete', [
-                        'id' => $row->id,
-                        'deleteRoute' => route('studio.catalog.bottle.delete', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('delete bottle')) {
+                        $actions .= view('components.datatables.delete', [
+                            'id' => $row->id,
+                            'deleteRoute' => route('studio.catalog.bottle.delete', $row->id),
+                        ])->render();
+                    }
 
                     return $actions;
                 })
diff --git a/app/Livewire/Datatable/Studio/Catalog/BrandsTable.php b/app/Livewire/Datatable/Studio/Catalog/BrandsTable.php
index 4487213..95bcf1f 100644
--- a/app/Livewire/Datatable/Studio/Catalog/BrandsTable.php
+++ b/app/Livewire/Datatable/Studio/Catalog/BrandsTable.php
@@ -34,57 +34,63 @@ public function columns(): array
                     $actions = '';
                     $maxSortOrder = Brand::max('sort_order');
 
-                    if ($row->sort_order > 1) {
-                        $actions .= view('components.datatables.sort-button', [
-                            'id' => $row->id,
-                            'module' => 'brand',
-                            'direction' => 'up',
-                            'tooltip' => 'Naik',
-                            'color' => 'cyan',
-                            'icon' => 'arrow-up',
-                        ])->render();
+                    if (auth()->user()->can('update brand')) {
+                        if ($row->sort_order > 1) {
+                            $actions .= view('components.datatables.sort-button', [
+                                'id' => $row->id,
+                                'module' => 'brand',
+                                'direction' => 'up',
+                                'tooltip' => 'Naik',
+                                'color' => 'cyan',
+                                'icon' => 'arrow-up',
+                            ])->render();
 
-                        $actions .= view('components.datatables.sort-button', [
+                            $actions .= view('components.datatables.sort-button', [
+                                'id' => $row->id,
+                                'module' => 'brand',
+                                'direction' => 'first',
+                                'tooltip' => 'Pertama',
+                                'color' => 'emerald',
+                                'icon' => 'bars-arrow-up',
+                            ])->render();
+                        }
+
+                        if ($row->sort_order < $maxSortOrder) {
+                            $actions .= view('components.datatables.sort-button', [
+                                'id' => $row->id,
+                                'module' => 'brand',
+                                'direction' => 'down',
+                                'tooltip' => 'Turun',
+                                'color' => 'orange',
+                                'icon' => 'arrow-down',
+                            ])->render();
+
+                            $actions .= view('components.datatables.sort-button', [
+                                'id' => $row->id,
+                                'module' => 'brand',
+                                'direction' => 'last',
+                                'tooltip' => 'Terakhir',
+                                'color' => 'rose',
+                                'icon' => 'bars-arrow-down',
+                            ])->render();
+                        }
+                    }
+
+                    if (auth()->user()->can('update brand')) {
+                        $actions .= view('components.datatables.edit-modal', [
                             'id' => $row->id,
-                            'module' => 'brand',
-                            'direction' => 'first',
-                            'tooltip' => 'Pertama',
-                            'color' => 'emerald',
-                            'icon' => 'bars-arrow-up',
+                            'method' => 'update',
+                            'modalTitle' => 'Ubah Kategori',
                         ])->render();
                     }
 
-                    if ($row->sort_order < $maxSortOrder) {
-                        $actions .= view('components.datatables.sort-button', [
+                    if (auth()->user()->can('delete brand')) {
+                        $actions .= view('components.datatables.delete', [
                             'id' => $row->id,
-                            'module' => 'brand',
-                            'direction' => 'down',
-                            'tooltip' => 'Turun',
-                            'color' => 'orange',
-                            'icon' => 'arrow-down',
-                        ])->render();
-
-                        $actions .= view('components.datatables.sort-button', [
-                            'id' => $row->id,
-                            'module' => 'brand',
-                            'direction' => 'last',
-                            'tooltip' => 'Terakhir',
-                            'color' => 'rose',
-                            'icon' => 'bars-arrow-down',
+                            'deleteRoute' => route('studio.catalog.brand.delete', $row->id),
                         ])->render();
                     }
 
-                    $actions .= view('components.datatables.edit-modal', [
-                        'id' => $row->id,
-                        'method' => 'update',
-                        'modalTitle' => 'Ubah Kategori',
-                    ])->render();
-
-                    $actions .= view('components.datatables.delete', [
-                        'id' => $row->id,
-                        'deleteRoute' => route('studio.catalog.brand.delete', $row->id),
-                    ])->render();
-
                     return $actions;
                 })
                 ->html(),
diff --git a/app/Livewire/Datatable/Studio/Catalog/CategoriesTable.php b/app/Livewire/Datatable/Studio/Catalog/CategoriesTable.php
index 6bdcdad..299e14e 100644
--- a/app/Livewire/Datatable/Studio/Catalog/CategoriesTable.php
+++ b/app/Livewire/Datatable/Studio/Catalog/CategoriesTable.php
@@ -25,57 +25,63 @@ public function columns(): array
                     $actions = '';
                     $maxSortOrder = Category::max('sort_order');
 
-                    if ($row->sort_order > 1) {
-                        $actions .= view('components.datatables.sort-button', [
-                            'id' => $row->id,
-                            'module' => 'category',
-                            'direction' => 'up',
-                            'tooltip' => 'Naik',
-                            'color' => 'cyan',
-                            'icon' => 'arrow-up',
-                        ])->render();
+                    if (auth()->user()->can('update category')) {
+                        if ($row->sort_order > 1) {
+                            $actions .= view('components.datatables.sort-button', [
+                                'id' => $row->id,
+                                'module' => 'category',
+                                'direction' => 'up',
+                                'tooltip' => 'Naik',
+                                'color' => 'cyan',
+                                'icon' => 'arrow-up',
+                            ])->render();
 
-                        $actions .= view('components.datatables.sort-button', [
+                            $actions .= view('components.datatables.sort-button', [
+                                'id' => $row->id,
+                                'module' => 'category',
+                                'direction' => 'first',
+                                'tooltip' => 'Pertama',
+                                'color' => 'emerald',
+                                'icon' => 'bars-arrow-up',
+                            ])->render();
+                        }
+
+                        if ($row->sort_order < $maxSortOrder) {
+                            $actions .= view('components.datatables.sort-button', [
+                                'id' => $row->id,
+                                'module' => 'category',
+                                'direction' => 'down',
+                                'tooltip' => 'Turun',
+                                'color' => 'orange',
+                                'icon' => 'arrow-down',
+                            ])->render();
+
+                            $actions .= view('components.datatables.sort-button', [
+                                'id' => $row->id,
+                                'module' => 'category',
+                                'direction' => 'last',
+                                'tooltip' => 'Terakhir',
+                                'color' => 'rose',
+                                'icon' => 'bars-arrow-down',
+                            ])->render();
+                        }
+                    }
+
+                    if (auth()->user()->can('update category')) {
+                        $actions .= view('components.datatables.edit-modal', [
                             'id' => $row->id,
-                            'module' => 'category',
-                            'direction' => 'first',
-                            'tooltip' => 'Pertama',
-                            'color' => 'emerald',
-                            'icon' => 'bars-arrow-up',
+                            'method' => 'update',
+                            'modalTitle' => 'Ubah Kategori',
                         ])->render();
                     }
 
-                    if ($row->sort_order < $maxSortOrder) {
-                        $actions .= view('components.datatables.sort-button', [
+                    if (auth()->user()->can('delete category')) {
+                        $actions .= view('components.datatables.delete', [
                             'id' => $row->id,
-                            'module' => 'category',
-                            'direction' => 'down',
-                            'tooltip' => 'Turun',
-                            'color' => 'orange',
-                            'icon' => 'arrow-down',
-                        ])->render();
-
-                        $actions .= view('components.datatables.sort-button', [
-                            'id' => $row->id,
-                            'module' => 'category',
-                            'direction' => 'last',
-                            'tooltip' => 'Terakhir',
-                            'color' => 'rose',
-                            'icon' => 'bars-arrow-down',
+                            'deleteRoute' => route('studio.catalog.category.delete', $row->id),
                         ])->render();
                     }
 
-                    $actions .= view('components.datatables.edit-modal', [
-                        'id' => $row->id,
-                        'method' => 'update',
-                        'modalTitle' => 'Ubah Kategori',
-                    ])->render();
-
-                    $actions .= view('components.datatables.delete', [
-                        'id' => $row->id,
-                        'deleteRoute' => route('studio.catalog.category.delete', $row->id),
-                    ])->render();
-
                     return $actions;
                 })
                 ->html(),
diff --git a/app/Livewire/Datatable/Studio/Catalog/PerfumesTable.php b/app/Livewire/Datatable/Studio/Catalog/PerfumesTable.php
index 2a4e5ba..60799b6 100644
--- a/app/Livewire/Datatable/Studio/Catalog/PerfumesTable.php
+++ b/app/Livewire/Datatable/Studio/Catalog/PerfumesTable.php
@@ -72,15 +72,19 @@ public function columns(): array
                 ->label(function ($row) {
                     $actions = '';
 
-                    $actions .= view('components.datatables.edit', [
-                        'id' => $row->id,
-                        'editRoute' => route('studio.catalog.perfume.edit', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('update perfume')) {
+                        $actions .= view('components.datatables.edit', [
+                            'id' => $row->id,
+                            'editRoute' => route('studio.catalog.perfume.edit', $row->id),
+                        ])->render();
+                    }
 
-                    $actions .= view('components.datatables.delete', [
-                        'id' => $row->id,
-                        'deleteRoute' => route('studio.catalog.perfume.delete', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('delete perfume')) {
+                        $actions .= view('components.datatables.delete', [
+                            'id' => $row->id,
+                            'deleteRoute' => route('studio.catalog.perfume.delete', $row->id),
+                        ])->render();
+                    }
 
                     return $actions;
                 })
diff --git a/app/Livewire/Datatable/Studio/Catalog/ProductsTable.php b/app/Livewire/Datatable/Studio/Catalog/ProductsTable.php
index d606370..0b45d44 100644
--- a/app/Livewire/Datatable/Studio/Catalog/ProductsTable.php
+++ b/app/Livewire/Datatable/Studio/Catalog/ProductsTable.php
@@ -55,15 +55,19 @@ public function columns(): array
                 ->label(function ($row) {
                     $actions = '';
 
-                    $actions .= view('components.datatables.edit', [
-                        'id' => $row->id,
-                        'editRoute' => route('studio.catalog.product.edit', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('update product')) {
+                        $actions .= view('components.datatables.edit', [
+                            'id' => $row->id,
+                            'editRoute' => route('studio.catalog.product.edit', $row->id),
+                        ])->render();
+                    }
 
-                    $actions .= view('components.datatables.delete', [
-                        'id' => $row->id,
-                        'deleteRoute' => route('studio.catalog.product.delete', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('delete product')) {
+                        $actions .= view('components.datatables.delete', [
+                            'id' => $row->id,
+                            'deleteRoute' => route('studio.catalog.product.delete', $row->id),
+                        ])->render();
+                    }
 
                     return $actions;
                 })
diff --git a/app/Livewire/Datatable/Studio/Finance/ExpensesTable.php b/app/Livewire/Datatable/Studio/Finance/ExpensesTable.php
index 7673c71..ab5ef6a 100644
--- a/app/Livewire/Datatable/Studio/Finance/ExpensesTable.php
+++ b/app/Livewire/Datatable/Studio/Finance/ExpensesTable.php
@@ -29,16 +29,20 @@ public function columns(): array
                 ->label(function ($row) {
                     $actions = '';
 
-                    $actions .= view('components.datatables.edit-modal', [
-                        'id' => $row->id,
-                        'method' => 'update',
-                        'modalTitle' => 'Ubah Kategori',
-                    ])->render();
+                    if (auth()->user()->can('update expense')) {
+                        $actions .= view('components.datatables.edit-modal', [
+                            'id' => $row->id,
+                            'method' => 'update',
+                            'modalTitle' => 'Ubah Kategori',
+                        ])->render();
+                    }
 
-                    $actions .= view('components.datatables.delete', [
-                        'id' => $row->id,
-                        'deleteRoute' => route('studio.finance.expense.delete', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('delete expense')) {
+                        $actions .= view('components.datatables.delete', [
+                            'id' => $row->id,
+                            'deleteRoute' => route('studio.finance.expense.delete', $row->id),
+                        ])->render();
+                    }
 
                     return $actions;
                 })
diff --git a/app/Livewire/Datatable/Studio/Loyalty/CustomersTable.php b/app/Livewire/Datatable/Studio/Loyalty/CustomersTable.php
index c73053d..14fe78b 100644
--- a/app/Livewire/Datatable/Studio/Loyalty/CustomersTable.php
+++ b/app/Livewire/Datatable/Studio/Loyalty/CustomersTable.php
@@ -36,16 +36,20 @@ public function columns(): array
                 ->label(function ($row) {
                     $actions = '';
 
-                    $actions .= view('components.datatables.edit-modal', [
-                        'id' => $row->id,
-                        'method' => 'update',
-                        'modalTitle' => 'Ubah Customer',
-                    ])->render();
+                    if (auth()->user()->can('update customer')) {
+                        $actions .= view('components.datatables.edit-modal', [
+                            'id' => $row->id,
+                            'method' => 'update',
+                            'modalTitle' => 'Ubah Customer',
+                        ])->render();
+                    }
 
-                    $actions .= view('components.datatables.delete', [
-                        'id' => $row->id,
-                        'deleteRoute' => route('studio.loyalty.customer.delete', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('delete customer')) {
+                        $actions .= view('components.datatables.delete', [
+                            'id' => $row->id,
+                            'deleteRoute' => route('studio.loyalty.customer.delete', $row->id),
+                        ])->render();
+                    }
 
                     return $actions;
                 })
diff --git a/app/Livewire/Datatable/Studio/Loyalty/TiersTable.php b/app/Livewire/Datatable/Studio/Loyalty/TiersTable.php
index 979468b..b324355 100644
--- a/app/Livewire/Datatable/Studio/Loyalty/TiersTable.php
+++ b/app/Livewire/Datatable/Studio/Loyalty/TiersTable.php
@@ -29,16 +29,20 @@ public function columns(): array
                 ->label(function ($row) {
                     $actions = '';
 
-                    $actions .= view('components.datatables.edit-modal', [
-                        'id' => $row->id,
-                        'method' => 'update',
-                        'modalTitle' => 'Ubah Tier',
-                    ])->render();
+                    if (auth()->user()->can('update tier')) {
+                        $actions .= view('components.datatables.edit-modal', [
+                            'id' => $row->id,
+                            'method' => 'update',
+                            'modalTitle' => 'Ubah Tier',
+                        ])->render();
+                    }
 
-                    $actions .= view('components.datatables.delete', [
-                        'id' => $row->id,
-                        'deleteRoute' => route('studio.loyalty.tier.delete', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('delete tier')) {
+                        $actions .= view('components.datatables.delete', [
+                            'id' => $row->id,
+                            'deleteRoute' => route('studio.loyalty.tier.delete', $row->id),
+                        ])->render();
+                    }
 
                     return $actions;
                 })
diff --git a/app/Livewire/Datatable/Studio/Loyalty/VouchersTable.php b/app/Livewire/Datatable/Studio/Loyalty/VouchersTable.php
index 3a311f5..03fcd93 100644
--- a/app/Livewire/Datatable/Studio/Loyalty/VouchersTable.php
+++ b/app/Livewire/Datatable/Studio/Loyalty/VouchersTable.php
@@ -93,15 +93,19 @@ public function columns(): array
                 ->label(function ($row) {
                     $actions = '';
 
-                    $actions .= view('components.datatables.edit', [
-                        'id' => $row->id,
-                        'editRoute' => route('studio.loyalty.voucher.edit', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('update voucher')) {
+                        $actions .= view('components.datatables.edit', [
+                            'id' => $row->id,
+                            'editRoute' => route('studio.loyalty.voucher.edit', $row->id),
+                        ])->render();
+                    }
 
-                    $actions .= view('components.datatables.delete', [
-                        'id' => $row->id,
-                        'deleteRoute' => route('studio.loyalty.voucher.delete', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('delete voucher')) {
+                        $actions .= view('components.datatables.delete', [
+                            'id' => $row->id,
+                            'deleteRoute' => route('studio.loyalty.voucher.delete', $row->id),
+                        ])->render();
+                    }
 
                     return $actions;
                 })
diff --git a/app/Livewire/Datatable/Studio/Master/OutletsTable.php b/app/Livewire/Datatable/Studio/Master/OutletsTable.php
index b9de82f..ce91791 100644
--- a/app/Livewire/Datatable/Studio/Master/OutletsTable.php
+++ b/app/Livewire/Datatable/Studio/Master/OutletsTable.php
@@ -104,15 +104,19 @@ public function columns(): array
                 ->label(function ($row) {
                     $actions = '';
 
-                    $actions .= view('components.datatables.edit', [
-                        'id' => $row->id,
-                        'editRoute' => route('studio.master.outlet.edit', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('update outlet')) {
+                        $actions .= view('components.datatables.edit', [
+                            'id' => $row->id,
+                            'editRoute' => route('studio.master.outlet.edit', $row->id),
+                        ])->render();
+                    }
 
-                    $actions .= view('components.datatables.delete', [
-                        'id' => $row->id,
-                        'deleteRoute' => route('studio.master.outlet.delete', $row->id),
-                    ])->render();
+                    if (auth()->user()->can('delete outlet')) {
+                        $actions .= view('components.datatables.delete', [
+                            'id' => $row->id,
+                            'deleteRoute' => route('studio.master.outlet.delete', $row->id),
+                        ])->render();
+                    }
 
                     return $actions;
                 })
diff --git a/app/Livewire/Datatable/Studio/Master/UsersTable.php b/app/Livewire/Datatable/Studio/Master/UsersTable.php
index 40498cd..5a015c8 100644
--- a/app/Livewire/Datatable/Studio/Master/UsersTable.php
+++ b/app/Livewire/Datatable/Studio/Master/UsersTable.php
@@ -124,15 +124,19 @@ public function columns(): array
                     $actions = '';
 
                     if (auth()->id() !== $row?->user?->id) {
-                        $actions .= view('components.datatables.edit', [
-                            'id' => $row->id,
-                            'editRoute' => route('studio.master.user.edit', $row->id),
-                        ])->render();
+                        if (auth()->user()->can('update user')) {
+                            $actions .= view('components.datatables.edit', [
+                                'id' => $row->id,
+                                'editRoute' => route('studio.master.user.edit', $row->id),
+                            ])->render();
+                        }
 
-                        $actions .= view('components.datatables.delete', [
-                            'id' => $row->id,
-                            'deleteRoute' => route('studio.master.user.delete', $row->id),
-                        ])->render();
+                        if (auth()->user()->can('delete user')) {
+                            $actions .= view('components.datatables.delete', [
+                                'id' => $row->id,
+                                'deleteRoute' => route('studio.master.user.delete', $row->id),
+                            ])->render();
+                        }
                     }
 
                     return $actions;
diff --git a/app/Livewire/Studio/Catalog/Bottle/Create.php b/app/Livewire/Studio/Catalog/Bottle/Create.php
index f02a329..5b85788 100644
--- a/app/Livewire/Studio/Catalog/Bottle/Create.php
+++ b/app/Livewire/Studio/Catalog/Bottle/Create.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Catalog\BottleForm;
 use App\Models\Outlet;
+use App\Traits\WithAuthorization;
 use App\Traits\WithOutletSelector;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
@@ -13,7 +14,7 @@
 #[Title('Tambah Botol')]
 class Create extends Component
 {
-    use WithOutletSelector, WithToast, WithUpdatedData;
+    use WithAuthorization, WithOutletSelector, WithToast, WithUpdatedData;
 
     public BottleForm $form;
 
@@ -26,6 +27,8 @@ public function mount()
 
     public function save()
     {
+        $this->canOrAbort('create bottle');
+
         $this->form->store();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Catalog/Bottle/Edit.php b/app/Livewire/Studio/Catalog/Bottle/Edit.php
index bb75718..242d555 100644
--- a/app/Livewire/Studio/Catalog/Bottle/Edit.php
+++ b/app/Livewire/Studio/Catalog/Bottle/Edit.php
@@ -29,6 +29,8 @@ public function mount(Bottle $bottle)
 
     public function save()
     {
+        $this->canOrAbort('update bottle');
+
         $this->form->update();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Catalog/Brand.php b/app/Livewire/Studio/Catalog/Brand.php
index 6ddfcf6..a0c820d 100644
--- a/app/Livewire/Studio/Catalog/Brand.php
+++ b/app/Livewire/Studio/Catalog/Brand.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Catalog\BrandForm;
 use App\Models\Brand as BrandModel;
+use App\Traits\WithAuthorization;
 use App\Traits\WithCloseModal;
 use App\Traits\WithConfirmation;
 use App\Traits\WithToast;
@@ -16,7 +17,7 @@
 #[Title('Merek')]
 class Brand extends Component
 {
-    use WithCloseModal, WithConfirmation, WithToast, WithUpdatedData;
+    use WithAuthorization, WithCloseModal, WithConfirmation, WithToast, WithUpdatedData;
 
     public BrandForm $form;
 
@@ -40,6 +41,8 @@ public function openModal(string $method, string $modalTitle, ?string $id = null
 
     public function create()
     {
+        $this->canOrAbort('create brand');
+
         $this->form->store();
 
         $this->dispatch('refreshDatatable');
@@ -51,6 +54,8 @@ public function create()
 
     public function update()
     {
+        $this->canOrAbort('update brand');
+
         $this->form->update();
 
         $this->dispatch('refreshDatatable');
@@ -76,6 +81,8 @@ public function delete(BrandModel $brand)
     #[On('fn:sortOrder')]
     public function sortOrder(BrandModel $brand, string $direction)
     {
+        $this->canOrAbort('update brand');
+
         $this->form->brand = $brand;
 
         $this->form->sortOrder($direction);
diff --git a/app/Livewire/Studio/Catalog/Category.php b/app/Livewire/Studio/Catalog/Category.php
index f6ffa26..799aebe 100644
--- a/app/Livewire/Studio/Catalog/Category.php
+++ b/app/Livewire/Studio/Catalog/Category.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Catalog\CategoryForm;
 use App\Models\Category as CategoryModel;
+use App\Traits\WithAuthorization;
 use App\Traits\WithCloseModal;
 use App\Traits\WithConfirmation;
 use App\Traits\WithToast;
@@ -16,7 +17,7 @@
 #[Title('Kategori')]
 class Category extends Component
 {
-    use WithCloseModal, WithConfirmation, WithToast, WithUpdatedData;
+    use WithAuthorization, WithCloseModal, WithConfirmation, WithToast, WithUpdatedData;
 
     public CategoryForm $form;
 
@@ -40,6 +41,8 @@ public function openModal(string $method, string $modalTitle, ?string $id = null
 
     public function create()
     {
+        $this->canOrAbort('create category');
+
         $this->form->store();
 
         $this->dispatch('refreshDatatable');
@@ -51,6 +54,8 @@ public function create()
 
     public function update()
     {
+        $this->canOrAbort('update category');
+
         $this->form->update();
 
         $this->dispatch('refreshDatatable');
@@ -76,6 +81,8 @@ public function delete(CategoryModel $category)
     #[On('fn:sortOrder')]
     public function sortOrder(CategoryModel $category, string $direction)
     {
+        $this->canOrAbort('update category');
+
         $this->form->category = $category;
 
         $this->form->sortOrder($direction);
diff --git a/app/Livewire/Studio/Catalog/Perfume/Create.php b/app/Livewire/Studio/Catalog/Perfume/Create.php
index 867aac7..697b37c 100644
--- a/app/Livewire/Studio/Catalog/Perfume/Create.php
+++ b/app/Livewire/Studio/Catalog/Perfume/Create.php
@@ -6,6 +6,7 @@
 use App\Models\Brand;
 use App\Models\Category;
 use App\Models\Outlet;
+use App\Traits\WithAuthorization;
 use App\Traits\WithCategorySelector;
 use App\Traits\WithOutletSelector;
 use App\Traits\WithToast;
@@ -16,7 +17,7 @@
 #[Title('Tambah Parfum')]
 class Create extends Component
 {
-    use WithCategorySelector, WithOutletSelector, WithToast, WithUpdatedData;
+    use WithAuthorization, WithCategorySelector, WithOutletSelector, WithToast, WithUpdatedData;
 
     public PerfumeForm $form;
 
@@ -37,6 +38,8 @@ public function mount()
 
     public function save()
     {
+        $this->canOrAbort('create perfume');
+
         $this->form->store();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Catalog/Perfume/Edit.php b/app/Livewire/Studio/Catalog/Perfume/Edit.php
index 4e731d9..a940e8d 100644
--- a/app/Livewire/Studio/Catalog/Perfume/Edit.php
+++ b/app/Livewire/Studio/Catalog/Perfume/Edit.php
@@ -7,6 +7,7 @@
 use App\Models\Category;
 use App\Models\Outlet;
 use App\Models\Perfume;
+use App\Traits\WithAuthorization;
 use App\Traits\WithCategorySelector;
 use App\Traits\WithOutletSelector;
 use App\Traits\WithToast;
@@ -17,7 +18,7 @@
 #[Title('Ubah Parfum')]
 class Edit extends Component
 {
-    use WithCategorySelector, WithOutletSelector, WithToast, WithUpdatedData;
+    use WithAuthorization, WithCategorySelector, WithOutletSelector, WithToast, WithUpdatedData;
 
     public PerfumeForm $form;
 
@@ -40,6 +41,8 @@ public function mount(Perfume $perfume)
 
     public function save()
     {
+        $this->canOrAbort('update perfume');
+
         $this->form->update();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Catalog/Product/Create.php b/app/Livewire/Studio/Catalog/Product/Create.php
index 35576fc..670eafa 100644
--- a/app/Livewire/Studio/Catalog/Product/Create.php
+++ b/app/Livewire/Studio/Catalog/Product/Create.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Catalog\ProductForm;
 use App\Models\Outlet;
+use App\Traits\WithAuthorization;
 use App\Traits\WithOutletSelector;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
@@ -13,7 +14,7 @@
 #[Title('Tambah Produk')]
 class Create extends Component
 {
-    use WithOutletSelector, WithToast, WithUpdatedData;
+    use WithAuthorization, WithOutletSelector, WithToast, WithUpdatedData;
 
     public ProductForm $form;
 
@@ -26,6 +27,8 @@ public function mount()
 
     public function save()
     {
+        $this->canOrAbort('create product');
+
         $this->form->store();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Catalog/Product/Edit.php b/app/Livewire/Studio/Catalog/Product/Edit.php
index 5f3a251..a07fa8d 100644
--- a/app/Livewire/Studio/Catalog/Product/Edit.php
+++ b/app/Livewire/Studio/Catalog/Product/Edit.php
@@ -5,6 +5,7 @@
 use App\Livewire\Forms\Studio\Catalog\ProductForm;
 use App\Models\Outlet;
 use App\Models\Product;
+use App\Traits\WithAuthorization;
 use App\Traits\WithOutletSelector;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
@@ -14,7 +15,7 @@
 #[Title('Ubah Produk')]
 class Edit extends Component
 {
-    use WithOutletSelector, WithToast, WithUpdatedData;
+    use WithAuthorization, WithOutletSelector, WithToast, WithUpdatedData;
 
     public ProductForm $form;
 
@@ -29,6 +30,8 @@ public function mount(Product $product)
 
     public function save()
     {
+        $this->canOrAbort('update product');
+
         $this->form->update();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Finance/Expense.php b/app/Livewire/Studio/Finance/Expense.php
index 5dd778f..3f3a8e9 100644
--- a/app/Livewire/Studio/Finance/Expense.php
+++ b/app/Livewire/Studio/Finance/Expense.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Finance\ExpenseForm;
 use App\Models\Expense as ExpenseModel;
+use App\Traits\WithAuthorization;
 use App\Traits\WithCloseModal;
 use App\Traits\WithConfirmation;
 use App\Traits\WithToast;
@@ -16,7 +17,7 @@
 #[Title('Pengeluaran')]
 class Expense extends Component
 {
-    use WithCloseModal, WithConfirmation, WithToast, WithUpdatedData;
+    use WithAuthorization, WithCloseModal, WithConfirmation, WithToast, WithUpdatedData;
 
     public ExpenseForm $form;
 
@@ -40,6 +41,8 @@ public function openModal(string $method, string $modalTitle, ?string $id = null
 
     public function create()
     {
+        $this->canOrAbort('create expense');
+
         $this->form->store();
 
         $this->dispatch('refreshDatatable');
@@ -51,6 +54,8 @@ public function create()
 
     public function update()
     {
+        $this->canOrAbort('update expense');
+
         $this->form->update();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Loyalty/Customer.php b/app/Livewire/Studio/Loyalty/Customer.php
index 4cb9c55..2868fa0 100644
--- a/app/Livewire/Studio/Loyalty/Customer.php
+++ b/app/Livewire/Studio/Loyalty/Customer.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Loyalty\CustomerForm;
 use App\Models\Customer as CustomerModel;
+use App\Traits\WithAuthorization;
 use App\Traits\WithCloseModal;
 use App\Traits\WithConfirmation;
 use App\Traits\WithToast;
@@ -16,7 +17,7 @@
 #[Title('Customer')]
 class Customer extends Component
 {
-    use WithCloseModal, WithConfirmation, WithToast, WithUpdatedData;
+    use WithAuthorization, WithCloseModal, WithConfirmation, WithToast, WithUpdatedData;
 
     public CustomerForm $form;
 
@@ -40,6 +41,8 @@ public function openModal(string $method, string $modalTitle, ?string $id = null
 
     public function create()
     {
+        $this->canOrAbort('create customer');
+
         $this->form->store();
 
         $this->dispatch('refreshDatatable');
@@ -51,6 +54,8 @@ public function create()
 
     public function update()
     {
+        $this->canOrAbort('update customer');
+
         $this->form->update();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Loyalty/Tier.php b/app/Livewire/Studio/Loyalty/Tier.php
index 833ba84..55ef6ec 100644
--- a/app/Livewire/Studio/Loyalty/Tier.php
+++ b/app/Livewire/Studio/Loyalty/Tier.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Loyalty\TierForm;
 use App\Models\Tier as TierModel;
+use App\Traits\WithAuthorization;
 use App\Traits\WithCloseModal;
 use App\Traits\WithConfirmation;
 use App\Traits\WithToast;
@@ -16,7 +17,7 @@
 #[Title('Tier')]
 class Tier extends Component
 {
-    use WithCloseModal, WithConfirmation, WithToast, WithUpdatedData;
+    use WithAuthorization, WithCloseModal, WithConfirmation, WithToast, WithUpdatedData;
 
     public TierForm $form;
 
@@ -40,6 +41,8 @@ public function openModal(string $method, string $modalTitle, ?string $id = null
 
     public function create()
     {
+        $this->canOrAbort('create tier');
+
         $this->form->store();
 
         $this->dispatch('refreshDatatable');
@@ -51,6 +54,8 @@ public function create()
 
     public function update()
     {
+        $this->canOrAbort('update tier');
+
         $this->form->update();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Loyalty/Voucher/Create.php b/app/Livewire/Studio/Loyalty/Voucher/Create.php
index ec15454..fdd9799 100644
--- a/app/Livewire/Studio/Loyalty/Voucher/Create.php
+++ b/app/Livewire/Studio/Loyalty/Voucher/Create.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Loyalty\VoucherForm;
 use App\Models\Outlet;
+use App\Traits\WithAuthorization;
 use App\Traits\WithOutletSelector;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
@@ -13,7 +14,7 @@
 #[Title('Tambah Voucher')]
 class Create extends Component
 {
-    use WithOutletSelector, WithToast, WithUpdatedData;
+    use WithAuthorization, WithOutletSelector, WithToast, WithUpdatedData;
 
     public VoucherForm $form;
 
@@ -26,6 +27,8 @@ public function mount()
 
     public function save()
     {
+        $this->canOrAbort('create voucher');
+
         $this->form->store();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Loyalty/Voucher/Edit.php b/app/Livewire/Studio/Loyalty/Voucher/Edit.php
index 125737d..70964f7 100644
--- a/app/Livewire/Studio/Loyalty/Voucher/Edit.php
+++ b/app/Livewire/Studio/Loyalty/Voucher/Edit.php
@@ -5,6 +5,7 @@
 use App\Livewire\Forms\Studio\Loyalty\VoucherForm;
 use App\Models\Outlet;
 use App\Models\Voucher;
+use App\Traits\WithAuthorization;
 use App\Traits\WithOutletSelector;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
@@ -14,7 +15,7 @@
 #[Title('Ubah Voucher')]
 class Edit extends Component
 {
-    use WithOutletSelector, WithToast, WithUpdatedData;
+    use WithAuthorization, WithOutletSelector, WithToast, WithUpdatedData;
 
     public VoucherForm $form;
 
@@ -29,6 +30,8 @@ public function mount(Voucher $voucher)
 
     public function save()
     {
+        $this->canOrAbort('update voucher');
+
         $this->form->update();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Master/Outlet/Create.php b/app/Livewire/Studio/Master/Outlet/Create.php
index 66b81d4..3a31b5e 100644
--- a/app/Livewire/Studio/Master/Outlet/Create.php
+++ b/app/Livewire/Studio/Master/Outlet/Create.php
@@ -5,6 +5,7 @@
 use App\Enums\Day;
 use App\Livewire\Forms\Studio\Master\OutletForm;
 use App\Traits\Outlet\WithFacilityHandler;
+use App\Traits\WithAuthorization;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
 use Livewire\Attributes\Title;
@@ -13,7 +14,7 @@
 #[Title('Tambah Outlet')]
 class Create extends Component
 {
-    use WithFacilityHandler, WithToast, WithUpdatedData;
+    use WithAuthorization, WithFacilityHandler, WithToast, WithUpdatedData;
 
     public OutletForm $form;
 
@@ -31,6 +32,8 @@ public function mount()
 
     public function save()
     {
+        $this->canOrAbort('create outlet');
+
         $this->form->store();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Master/Outlet/Edit.php b/app/Livewire/Studio/Master/Outlet/Edit.php
index 03ae298..975cc34 100644
--- a/app/Livewire/Studio/Master/Outlet/Edit.php
+++ b/app/Livewire/Studio/Master/Outlet/Edit.php
@@ -6,6 +6,7 @@
 use App\Livewire\Forms\Studio\Master\OutletForm;
 use App\Models\Outlet;
 use App\Traits\Outlet\WithFacilityHandler;
+use App\Traits\WithAuthorization;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
 use Livewire\Attributes\Title;
@@ -14,7 +15,7 @@
 #[Title('Ubah Outlet')]
 class Edit extends Component
 {
-    use WithFacilityHandler, WithToast, WithUpdatedData;
+    use WithAuthorization, WithFacilityHandler, WithToast, WithUpdatedData;
 
     public OutletForm $form;
 
@@ -29,6 +30,8 @@ public function mount(Outlet $outlet)
 
     public function save()
     {
+        $this->canOrAbort('update outlet');
+
         $this->form->update();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Master/User/Create.php b/app/Livewire/Studio/Master/User/Create.php
index 446837a..af7b6ec 100644
--- a/app/Livewire/Studio/Master/User/Create.php
+++ b/app/Livewire/Studio/Master/User/Create.php
@@ -3,6 +3,7 @@
 namespace App\Livewire\Studio\Master\User;
 
 use App\Livewire\Forms\Studio\Master\UserForm;
+use App\Traits\WithAuthorization;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
 use Livewire\Attributes\Title;
@@ -11,12 +12,14 @@
 #[Title('Tambah Pegawai')]
 class Create extends Component
 {
-    use WithToast, WithUpdatedData;
+    use WithAuthorization, WithToast, WithUpdatedData;
 
     public UserForm $form;
 
     public function save()
     {
+        $this->canOrAbort('create user');
+
         $this->form->store();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Master/User/Edit.php b/app/Livewire/Studio/Master/User/Edit.php
index 5625156..61a6db4 100644
--- a/app/Livewire/Studio/Master/User/Edit.php
+++ b/app/Livewire/Studio/Master/User/Edit.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Master\UserForm;
 use App\Models\User;
+use App\Traits\WithAuthorization;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
 use Livewire\Attributes\Title;
@@ -12,7 +13,7 @@
 #[Title('Ubah Pegawai')]
 class Edit extends Component
 {
-    use WithToast, WithUpdatedData;
+    use WithAuthorization, WithToast, WithUpdatedData;
 
     public UserForm $form;
 
@@ -23,6 +24,8 @@ public function mount(User $user)
 
     public function save()
     {
+        $this->canOrAbort('update user');
+
         $this->form->update();
 
         $this->dispatch('refreshDatatable');
diff --git a/app/Livewire/Studio/Setting/Account.php b/app/Livewire/Studio/Setting/Account.php
index c7daa94..cda2fca 100644
--- a/app/Livewire/Studio/Setting/Account.php
+++ b/app/Livewire/Studio/Setting/Account.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Setting\AccountForm;
 use App\Models\User;
+use App\Traits\WithAuthorization;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
 use Livewire\Attributes\Title;
@@ -12,7 +13,7 @@
 #[Title('Akun')]
 class Account extends Component
 {
-    use WithToast, WithUpdatedData;
+    use WithAuthorization, WithToast, WithUpdatedData;
 
     public AccountForm $form;
 
@@ -23,6 +24,8 @@ public function mount(User $user)
 
     public function update()
     {
+        $this->canOrAbort('update account');
+
         $this->form->update();
 
         $this->toast('Akun berhasil diperbarui.');
diff --git a/app/Livewire/Studio/Setting/Password.php b/app/Livewire/Studio/Setting/Password.php
index 84ed9f5..3fa47d7 100644
--- a/app/Livewire/Studio/Setting/Password.php
+++ b/app/Livewire/Studio/Setting/Password.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Setting\PasswordForm;
 use App\Models\User;
+use App\Traits\WithAuthorization;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
 use Illuminate\Support\Facades\Hash;
@@ -13,7 +14,7 @@
 #[Title('Kata Sandi')]
 class Password extends Component
 {
-    use WithToast, WithUpdatedData;
+    use WithAuthorization, WithToast, WithUpdatedData;
 
     public PasswordForm $form;
 
@@ -24,6 +25,8 @@ public function mount(User $user)
 
     public function update()
     {
+        $this->canOrAbort('update password');
+
         if (! Hash::check($this->form->current_password, $this->form->user->password)) {
             $this->toast('Kata sandi yang Anda masukkan tidak sesuai dengan kata sandi saat ini.', 'Gagal', 'danger');
 
diff --git a/app/Livewire/Studio/Setting/Profile.php b/app/Livewire/Studio/Setting/Profile.php
index e2228d1..2f84363 100644
--- a/app/Livewire/Studio/Setting/Profile.php
+++ b/app/Livewire/Studio/Setting/Profile.php
@@ -4,6 +4,7 @@
 
 use App\Livewire\Forms\Studio\Setting\ProfileForm;
 use App\Models\Employee;
+use App\Traits\WithAuthorization;
 use App\Traits\WithToast;
 use App\Traits\WithUpdatedData;
 use Livewire\Attributes\Title;
@@ -12,7 +13,7 @@
 #[Title('Profil')]
 class Profile extends Component
 {
-    use WithToast, WithUpdatedData;
+    use WithAuthorization, WithToast, WithUpdatedData;
 
     public ProfileForm $form;
 
@@ -23,6 +24,8 @@ public function mount(Employee $employee)
 
     public function update()
     {
+        $this->canOrAbort('update profile');
+
         $this->form->update();
 
         $this->toast('Profil berhasil diperbarui.');
diff --git a/app/Providers/ViewServiceProvider.php b/app/Providers/ViewServiceProvider.php
new file mode 100644
index 0000000..30bf18e
--- /dev/null
+++ b/app/Providers/ViewServiceProvider.php
@@ -0,0 +1,128 @@
+<?php
+
+namespace App\Providers;
+
+use Illuminate\Support\Facades\View;
+use Illuminate\Support\ServiceProvider;
+
+class ViewServiceProvider extends ServiceProvider
+{
+    public function boot(): void
+    {
+        View::composer('*', function ($view) {
+            $sidebar = [
+                [
+                    'heading' => 'Dasbor',
+                    'items' => [
+                        [
+                            'label' => 'Ringkasan',
+                            'icon' => 'squares-plus',
+                            'route' => 'studio.dashboard.overview',
+                            'match' => 'studio.dashboard.overview',
+                            'can' => 'view overview',
+                        ],
+                    ],
+                ],
+                [
+                    'heading' => 'Master',
+                    'items' => [
+                        [
+                            'label' => 'Outlet',
+                            'icon' => 'home-modern',
+                            'route' => 'studio.master.outlet.index',
+                            'match' => 'studio.master.outlet.*',
+                            'can' => 'view outlet',
+                        ],
+                        [
+                            'label' => 'Pegawai',
+                            'icon' => 'users',
+                            'route' => 'studio.master.user.index',
+                            'match' => 'studio.master.user.*',
+                            'can' => 'view user',
+                        ],
+                    ],
+                ],
+                [
+                    'heading' => 'Loyalty',
+                    'items' => [
+                        [
+                            'label' => 'Tier',
+                            'icon' => 'star',
+                            'route' => 'studio.loyalty.tier.index',
+                            'match' => 'studio.loyalty.tier.*',
+                            'can' => 'view tier',
+                        ],
+                        [
+                            'label' => 'Voucher',
+                            'icon' => 'ticket',
+                            'route' => 'studio.loyalty.voucher.index',
+                            'match' => 'studio.loyalty.voucher.*',
+                            'can' => 'view voucher',
+                        ],
+                        [
+                            'label' => 'Customer',
+                            'icon' => 'user-plus',
+                            'route' => 'studio.loyalty.customer.index',
+                            'match' => 'studio.loyalty.customer.*',
+                            'can' => 'view customer',
+                        ],
+                    ],
+                ],
+                [
+                    'heading' => 'Katalog',
+                    'items' => [
+                        [
+                            'label' => 'Kategori',
+                            'icon' => 'list-bullet',
+                            'route' => 'studio.catalog.category.index',
+                            'match' => 'studio.catalog.category.*',
+                            'can' => 'view category',
+                        ],
+                        [
+                            'label' => 'Merek',
+                            'icon' => 'tag',
+                            'route' => 'studio.catalog.brand.index',
+                            'match' => 'studio.catalog.brand.*',
+                            'can' => 'view brand',
+                        ],
+                        [
+                            'label' => 'Parfum',
+                            'icon' => 'flower-2',
+                            'route' => 'studio.catalog.perfume.index',
+                            'match' => 'studio.catalog.perfume.*',
+                            'can' => 'view perfume',
+                        ],
+                        [
+                            'label' => 'Produk',
+                            'icon' => 'boxes',
+                            'route' => 'studio.catalog.product.index',
+                            'match' => 'studio.catalog.product.*',
+                            'can' => 'view product',
+                        ],
+                        [
+                            'label' => 'Botol',
+                            'icon' => 'beaker',
+                            'route' => 'studio.catalog.bottle.index',
+                            'match' => 'studio.catalog.bottle.*',
+                            'can' => 'view bottle',
+                        ],
+                    ],
+                ],
+                [
+                    'heading' => 'Keuangan',
+                    'items' => [
+                        [
+                            'label' => 'Pengeluaran',
+                            'icon' => 'banknote-arrow-down',
+                            'route' => 'studio.finance.expense.index',
+                            'match' => 'studio.finance.expense.*',
+                            'can' => 'view expense',
+                        ],
+                    ],
+                ],
+            ];
+
+            $view->with('sidebar', $sidebar);
+        });
+    }
+}
diff --git a/app/Traits/WithAuthorization.php b/app/Traits/WithAuthorization.php
new file mode 100644
index 0000000..cbd9db1
--- /dev/null
+++ b/app/Traits/WithAuthorization.php
@@ -0,0 +1,13 @@
+<?php
+
+namespace App\Traits;
+
+trait WithAuthorization
+{
+    public function canOrAbort(string $ability, $model = null): void
+    {
+        if (auth()->user()->cannot($ability, $model)) {
+            abort(403);
+        }
+    }
+}
diff --git a/bootstrap/providers.php b/bootstrap/providers.php
index 38b258d..6bdee7e 100644
--- a/bootstrap/providers.php
+++ b/bootstrap/providers.php
@@ -2,4 +2,5 @@
 
 return [
     App\Providers\AppServiceProvider::class,
+    App\Providers\ViewServiceProvider::class,
 ];
diff --git a/database/seeders/DatabaseSeeder.php b/database/seeders/DatabaseSeeder.php
index 739ab8b..cb2bfc7 100644
--- a/database/seeders/DatabaseSeeder.php
+++ b/database/seeders/DatabaseSeeder.php
@@ -9,6 +9,7 @@ class DatabaseSeeder extends Seeder
     public function run(): void
     {
         $this->call([
+            RolePermissionSeeder::class,
             OutletSeeder::class,
             UserSeeder::class,
             TierSeeder::class,
diff --git a/database/seeders/RolePermissionSeeder.php b/database/seeders/RolePermissionSeeder.php
new file mode 100644
index 0000000..fe7982b
--- /dev/null
+++ b/database/seeders/RolePermissionSeeder.php
@@ -0,0 +1,194 @@
+<?php
+
+namespace Database\Seeders;
+
+use Illuminate\Database\Seeder;
+use Spatie\Permission\Models\Permission;
+use Spatie\Permission\Models\Role;
+
+class RolePermissionSeeder extends Seeder
+{
+    public function run(): void
+    {
+        $developer = Role::firstOrCreate(['name' => 'Developer']);
+        $owner = Role::firstOrCreate(['name' => 'Owner']);
+        $leader = Role::firstOrCreate(['name' => 'Leader']);
+        $admin = Role::firstOrCreate(['name' => 'Admin']);
+        $partner = Role::firstOrCreate(['name' => 'Partner']);
+        $customer = Role::firstOrCreate(['name' => 'Customer']);
+
+        $permissions = [
+            'view account',
+            'update account',
+
+            'view profile',
+            'update profile',
+
+            'view password',
+            'update password',
+
+            'view overview',
+
+            'view outlet',
+            'create outlet',
+            'update outlet',
+            'delete outlet',
+
+            'view user',
+            'create user',
+            'update user',
+            'delete user',
+
+            'view tier',
+            'create tier',
+            'update tier',
+            'delete tier',
+
+            'view voucher',
+            'create voucher',
+            'update voucher',
+            'delete voucher',
+
+            'view customer',
+            'create customer',
+            'update customer',
+            'delete customer',
+
+            'view category',
+            'create category',
+            'update category',
+            'delete category',
+
+            'view brand',
+            'create brand',
+            'update brand',
+            'delete brand',
+
+            'view perfume',
+            'create perfume',
+            'update perfume',
+            'delete perfume',
+
+            'view product',
+            'create product',
+            'update product',
+            'delete product',
+
+            'view bottle',
+            'create bottle',
+            'update bottle',
+            'delete bottle',
+
+            'view expense',
+            'create expense',
+            'update expense',
+            'delete expense',
+        ];
+
+        foreach ($permissions as $permission) {
+            Permission::firstOrCreate(['name' => $permission]);
+        }
+
+        $developer->syncPermissions($permissions);
+
+        $owner->syncPermissions($permissions);
+
+        $leader->syncPermissions(array_diff($permissions, [
+            'view outlet',
+            'create outlet',
+            'update outlet',
+            'delete outlet',
+
+            'view user',
+            'create user',
+            'update user',
+            'delete user',
+
+            'create tier',
+            'update tier',
+            'delete tier',
+
+            'create voucher',
+            'update voucher',
+            'delete voucher',
+
+            'create perfume',
+            'update perfume',
+            'delete perfume',
+
+            'create product',
+            'update product',
+            'delete product',
+
+            'create bottle',
+            'update bottle',
+            'delete bottle',
+        ]));
+
+        $admin->syncPermissions(array_diff($permissions, [
+            'view outlet',
+            'create outlet',
+            'update outlet',
+            'delete outlet',
+
+            'view user',
+            'create user',
+            'update user',
+            'delete user',
+
+            'create tier',
+            'update tier',
+            'delete tier',
+
+            'create voucher',
+            'update voucher',
+            'delete voucher',
+
+            'create category',
+            'update category',
+            'delete category',
+
+            'create brand',
+            'update brand',
+            'delete brand',
+
+            'create perfume',
+            'update perfume',
+            'delete perfume',
+
+            'create product',
+            'update product',
+            'delete product',
+
+            'create bottle',
+            'update bottle',
+            'delete bottle',
+        ]));
+
+        $partner->syncPermissions([
+            'view overview',
+
+            'view account',
+            'update account',
+
+            'view profile',
+            'update profile',
+
+            'view password',
+            'update password',
+        ]);
+
+        $customer->syncPermissions([
+            'view overview',
+
+            'view account',
+            'update account',
+
+            'view profile',
+            'update profile',
+
+            'view password',
+            'update password',
+        ]);
+    }
+}
diff --git a/database/seeders/UserSeeder.php b/database/seeders/UserSeeder.php
index 44ee5de..670e993 100644
--- a/database/seeders/UserSeeder.php
+++ b/database/seeders/UserSeeder.php
@@ -4,6 +4,7 @@
 
 use App\Enums\EmploymentStatus;
 use App\Enums\Gender;
+use App\Enums\UserRole;
 use App\Models\Employee;
 use App\Models\ReferralCode;
 use App\Models\User;
@@ -36,5 +37,7 @@ public function run(): void
             'user_id' => $user->id,
             'code' => generateReferralCode('pangestu', 1),
         ]);
+
+        $user->assignRole(UserRole::Developer);
     }
 }
diff --git a/resources/views/components/partials/studio/_sidebar.blade.php b/resources/views/components/partials/studio/_sidebar.blade.php
index e297054..18950bc 100644
--- a/resources/views/components/partials/studio/_sidebar.blade.php
+++ b/resources/views/components/partials/studio/_sidebar.blade.php
@@ -1,75 +1,41 @@
 <flux:sidebar sticky stashable
     class="bg-zinc-50 dark:bg-zinc-900 border-r rtl:border-r-0 rtl:border-l border-zinc-200 dark:border-zinc-700">
+
     <flux:sidebar.toggle class="lg:hidden" icon="x-mark" />
     <flux:brand logo="{{ asset('assets/images/logo.png') }}" name="Yadi Parfum" class="px-2 dark:hidden" />
     <flux:brand logo="{{ asset('assets/images/dark-logo.png') }}" name="Yadi Parfum" class="px-2 hidden dark:flex" />
+
     <flux:navlist variant="outline">
-        <flux:navlist.item icon="squares-plus" href="{{ route('studio.dashboard.overview') }}"
-            :current="request()->routeIs('studio.dashboard.overview')" wire:navigate.hover>
-            Ringkasan</flux:navlist.item>
+        @foreach ($sidebar as $section)
+            @php
+                $items = collect($section['items'])->filter(function ($item) {
+                    return !isset($item['can']) || auth()->user()?->can($item['can']);
+                });
+            @endphp
 
-        <div class="mt-3 mb-1">
-            <div class="text-zinc-500 dark:text-gray-300 text-sm/6">Master</div>
-            <div class="grid gap-2">
-                <flux:navlist.item icon="home-modern" href="{{ route('studio.master.outlet.index') }}"
-                    :current="request()->routeIs('studio.master.outlet.*')" wire:navigate.hover>Outlet
-                </flux:navlist.item>
-
-                <flux:navlist.item icon="users" href="{{ route('studio.master.user.index') }}"
-                    :current="request()->routeIs('studio.master.user.*')" wire:navigate.hover>Pegawai
-                </flux:navlist.item>
-            </div>
-        </div>
-
-        <div class="mt-3 mb-1">
-            <div class="text-zinc-500 dark:text-gray-300 text-sm/6">Loyalty</div>
-            <div class="grid gap-2">
-                <flux:navlist.item icon="star" href="{{ route('studio.loyalty.tier.index') }}"
-                    :current="request()->routeIs('studio.loyalty.tier.*')" wire:navigate.hover>Tier
-                </flux:navlist.item>
-
-                <flux:navlist.item icon="ticket" href="{{ route('studio.loyalty.voucher.index') }}"
-                    :current="request()->routeIs('studio.loyalty.voucher.*')" wire:navigate.hover>Voucher
-                </flux:navlist.item>
-
-                <flux:navlist.item icon="user-plus" href="{{ route('studio.loyalty.customer.index') }}"
-                    :current="request()->routeIs('studio.loyalty.customer.*')" wire:navigate.hover>Customer
-                </flux:navlist.item>
-            </div>
-        </div>
-
-        <div class="mt-3 mb-1">
-            <div class="text-zinc-500 dark:text-gray-300 text-sm/6">Katalog</div>
-            <div class="grid gap-2">
-                <flux:navlist.item icon="list-bullet" href="{{ route('studio.catalog.category.index') }}"
-                    :current="request()->routeIs('studio.catalog.category.*')" wire:navigate.hover>Kategori
-                </flux:navlist.item>
-
-                <flux:navlist.item icon="tag" href="{{ route('studio.catalog.brand.index') }}"
-                    :current="request()->routeIs('studio.catalog.brand.*')" wire:navigate.hover>Merek
-                </flux:navlist.item>
-
-                <flux:navlist.item icon="flower-2" href="{{ route('studio.catalog.perfume.index') }}"
-                    :current="request()->routeIs('studio.catalog.perfume.*')" wire:navigate.hover>Parfum
-                </flux:navlist.item>
-
-                <flux:navlist.item icon="boxes" href="{{ route('studio.catalog.product.index') }}"
-                    :current="request()->routeIs('studio.catalog.product.*')" wire:navigate.hover>Produk
-                </flux:navlist.item>
-
-                <flux:navlist.item icon="beaker" href="{{ route('studio.catalog.bottle.index') }}"
-                    :current="request()->routeIs('studio.catalog.bottle.*')" wire:navigate.hover>Botol
-                </flux:navlist.item>
-            </div>
-        </div>
-
-        <div class="mt-3 mb-1">
-            <div class="text-zinc-500 dark:text-gray-300 text-sm/6">Keuangan</div>
-            <div class="grid gap-2">
-                <flux:navlist.item icon="banknote-arrow-down" href="{{ route('studio.finance.expense.index') }}"
-                    :current="request()->routeIs('studio.finance.expense.*')" wire:navigate.hover>Pengeluaran
-                </flux:navlist.item>
-            </div>
-        </div>
+            @if ($items->isNotEmpty())
+                @if ($section['heading'])
+                    <div class="mt-3 mb-1">
+                        <div class="text-zinc-500 dark:text-gray-300 text-sm/6">{{ $section['heading'] }}</div>
+                        <div class="grid gap-2">
+                            @foreach ($items as $item)
+                                <flux:navlist.item icon="{{ $item['icon'] }}" href="{{ route($item['route']) }}"
+                                    :current="request()->routeIs($item['match'])" wire:navigate.hover>
+                                    {{ $item['label'] }}
+                                </flux:navlist.item>
+                            @endforeach
+                        </div>
+                    </div>
+                @else
+                    @foreach ($items as $item)
+                        <flux:navlist.item icon="{{ $item['icon'] }}" href="{{ route($item['route']) }}"
+                            :current="request()->routeIs($item['match'])" wire:navigate.hover>
+                            {{ $item['label'] }}
+                        </flux:navlist.item>
+                    @endforeach
+                @endif
+            @endif
+        @endforeach
     </flux:navlist>
+
 </flux:sidebar>
diff --git a/resources/views/livewire/studio/catalog/bottle/index.blade.php b/resources/views/livewire/studio/catalog/bottle/index.blade.php
index c4d55d5..1175bf6 100644
--- a/resources/views/livewire/studio/catalog/bottle/index.blade.php
+++ b/resources/views/livewire/studio/catalog/bottle/index.blade.php
@@ -3,12 +3,14 @@
         <div>
             <flux:heading size="xl">{{ $pageTitle }}</flux:heading>
         </div>
-        <div>
-            <flux:button href="{{ route('studio.catalog.bottle.create') }}" variant="primary" wire:navigate.hover
-                class="text-sm">
-                Tambah
-            </flux:button>
-        </div>
+        @if (auth()->user()->can('create bottle'))
+            <div>
+                <flux:button href="{{ route('studio.catalog.bottle.create') }}" variant="primary" wire:navigate.hover
+                    class="text-sm">
+                    Tambah
+                </flux:button>
+            </div>
+        @endif
     </div>
 
     <div class="mt-6">
diff --git a/resources/views/livewire/studio/catalog/brands.blade.php b/resources/views/livewire/studio/catalog/brands.blade.php
index 70cae7a..9be7105 100644
--- a/resources/views/livewire/studio/catalog/brands.blade.php
+++ b/resources/views/livewire/studio/catalog/brands.blade.php
@@ -3,13 +3,15 @@
         <div>
             <flux:heading size="xl">{{ $pageTitle }}</flux:heading>
         </div>
-        <div>
-            <flux:modal.trigger name="form-modal">
-                <flux:button variant="primary" class="text-sm"
-                    wire:click="$dispatch('modal:open', {method: 'create', 'modalTitle': 'Tambah Merek'})">Tambah
-                </flux:button>
-            </flux:modal.trigger>
-        </div>
+        @if (auth()->user()->can('create brand'))
+            <div>
+                <flux:modal.trigger name="form-modal">
+                    <flux:button variant="primary" class="text-sm"
+                        wire:click="$dispatch('modal:open', {method: 'create', 'modalTitle': 'Tambah Merek'})">Tambah
+                    </flux:button>
+                </flux:modal.trigger>
+            </div>
+        @endif
     </div>
 
     <div class="mt-6">
diff --git a/resources/views/livewire/studio/catalog/categories.blade.php b/resources/views/livewire/studio/catalog/categories.blade.php
index de5b3f2..1a6b505 100644
--- a/resources/views/livewire/studio/catalog/categories.blade.php
+++ b/resources/views/livewire/studio/catalog/categories.blade.php
@@ -3,13 +3,15 @@
         <div>
             <flux:heading size="xl">{{ $pageTitle }}</flux:heading>
         </div>
-        <div>
-            <flux:modal.trigger name="form-modal">
-                <flux:button variant="primary" class="text-sm"
-                    wire:click="$dispatch('modal:open', {method: 'create', 'modalTitle': 'Tambah Kategori'})">Tambah
-                </flux:button>
-            </flux:modal.trigger>
-        </div>
+        @if (auth()->user()->can('create category'))
+            <div>
+                <flux:modal.trigger name="form-modal">
+                    <flux:button variant="primary" class="text-sm"
+                        wire:click="$dispatch('modal:open', {method: 'create', 'modalTitle': 'Tambah Kategori'})">Tambah
+                    </flux:button>
+                </flux:modal.trigger>
+            </div>
+        @endif
     </div>
 
     <div class="mt-6">
diff --git a/resources/views/livewire/studio/catalog/perfume/index.blade.php b/resources/views/livewire/studio/catalog/perfume/index.blade.php
index f0cb07b..2be6593 100644
--- a/resources/views/livewire/studio/catalog/perfume/index.blade.php
+++ b/resources/views/livewire/studio/catalog/perfume/index.blade.php
@@ -3,12 +3,14 @@
         <div>
             <flux:heading size="xl">{{ $pageTitle }}</flux:heading>
         </div>
-        <div>
-            <flux:button href="{{ route('studio.catalog.perfume.create') }}" variant="primary" wire:navigate.hover
-                class="text-sm">
-                Tambah
-            </flux:button>
-        </div>
+        @if (auth()->user()->can('create perfume'))
+            <div>
+                <flux:button href="{{ route('studio.catalog.perfume.create') }}" variant="primary" wire:navigate.hover
+                    class="text-sm">
+                    Tambah
+                </flux:button>
+            </div>
+        @endif
     </div>
 
     <div class="mt-6">
diff --git a/resources/views/livewire/studio/catalog/product/index.blade.php b/resources/views/livewire/studio/catalog/product/index.blade.php
index 56efc2e..ab5c64f 100644
--- a/resources/views/livewire/studio/catalog/product/index.blade.php
+++ b/resources/views/livewire/studio/catalog/product/index.blade.php
@@ -3,12 +3,14 @@
         <div>
             <flux:heading size="xl">{{ $pageTitle }}</flux:heading>
         </div>
-        <div>
-            <flux:button href="{{ route('studio.catalog.product.create') }}" variant="primary" wire:navigate.hover
-                class="text-sm">
-                Tambah
-            </flux:button>
-        </div>
+        @if (auth()->user()->can('create product'))
+            <div>
+                <flux:button href="{{ route('studio.catalog.product.create') }}" variant="primary" wire:navigate.hover
+                    class="text-sm">
+                    Tambah
+                </flux:button>
+            </div>
+        @endif
     </div>
 
     <div class="mt-6">
diff --git a/resources/views/livewire/studio/finance/expenses.blade.php b/resources/views/livewire/studio/finance/expenses.blade.php
index 4508bfe..ef8eb73 100644
--- a/resources/views/livewire/studio/finance/expenses.blade.php
+++ b/resources/views/livewire/studio/finance/expenses.blade.php
@@ -3,13 +3,16 @@
         <div>
             <flux:heading size="xl">{{ $pageTitle }}</flux:heading>
         </div>
-        <div>
-            <flux:modal.trigger name="form-modal">
-                <flux:button variant="primary" class="text-sm"
-                    wire:click="$dispatch('modal:open', {method: 'create', 'modalTitle': 'Tambah Pengeluaran'})">Tambah
-                </flux:button>
-            </flux:modal.trigger>
-        </div>
+        @if (auth()->user()->can('create expense'))
+            <div>
+                <flux:modal.trigger name="form-modal">
+                    <flux:button variant="primary" class="text-sm"
+                        wire:click="$dispatch('modal:open', {method: 'create', 'modalTitle': 'Tambah Pengeluaran'})">
+                        Tambah
+                    </flux:button>
+                </flux:modal.trigger>
+            </div>
+        @endif
     </div>
 
     <div class="mt-6">
diff --git a/resources/views/livewire/studio/loyalty/customers.blade.php b/resources/views/livewire/studio/loyalty/customers.blade.php
index 0ee4318..b009e95 100644
--- a/resources/views/livewire/studio/loyalty/customers.blade.php
+++ b/resources/views/livewire/studio/loyalty/customers.blade.php
@@ -3,13 +3,15 @@
         <div>
             <flux:heading size="xl">{{ $pageTitle }}</flux:heading>
         </div>
-        <div>
-            <flux:modal.trigger name="form-modal">
-                <flux:button variant="primary" class="text-sm"
-                    wire:click="$dispatch('modal:open', {method: 'create', 'modalTitle': 'Tambah Customer'})">Tambah
-                </flux:button>
-            </flux:modal.trigger>
-        </div>
+        @if (auth()->user()->can('create customer'))
+            <div>
+                <flux:modal.trigger name="form-modal">
+                    <flux:button variant="primary" class="text-sm"
+                        wire:click="$dispatch('modal:open', {method: 'create', 'modalTitle': 'Tambah Customer'})">Tambah
+                    </flux:button>
+                </flux:modal.trigger>
+            </div>
+        @endif
     </div>
 
     <div class="mt-6">
diff --git a/resources/views/livewire/studio/loyalty/tiers.blade.php b/resources/views/livewire/studio/loyalty/tiers.blade.php
index 96ec409..2493bc8 100644
--- a/resources/views/livewire/studio/loyalty/tiers.blade.php
+++ b/resources/views/livewire/studio/loyalty/tiers.blade.php
@@ -3,13 +3,15 @@
         <div>
             <flux:heading size="xl">{{ $pageTitle }}</flux:heading>
         </div>
-        <div>
-            <flux:modal.trigger name="form-modal">
-                <flux:button variant="primary" class="text-sm"
-                    wire:click="$dispatch('modal:open', {method: 'create', 'modalTitle': 'Tambah Tier'})">Tambah
-                </flux:button>
-            </flux:modal.trigger>
-        </div>
+        @if (auth()->user()->can('create tier'))
+            <div>
+                <flux:modal.trigger name="form-modal">
+                    <flux:button variant="primary" class="text-sm"
+                        wire:click="$dispatch('modal:open', {method: 'create', 'modalTitle': 'Tambah Tier'})">Tambah
+                    </flux:button>
+                </flux:modal.trigger>
+            </div>
+        @endif
     </div>
 
     <div class="mt-6">
diff --git a/resources/views/livewire/studio/loyalty/voucher/index.blade.php b/resources/views/livewire/studio/loyalty/voucher/index.blade.php
index c0f10f6..9cbf5b0 100644
--- a/resources/views/livewire/studio/loyalty/voucher/index.blade.php
+++ b/resources/views/livewire/studio/loyalty/voucher/index.blade.php
@@ -3,12 +3,14 @@
         <div>
             <flux:heading size="xl">{{ $pageTitle }}</flux:heading>
         </div>
-        <div>
-            <flux:button href="{{ route('studio.loyalty.voucher.create') }}" variant="primary" wire:navigate.hover
-                class="text-sm">
-                Tambah
-            </flux:button>
-        </div>
+        @if (auth()->user()->can('create voucher'))
+            <div>
+                <flux:button href="{{ route('studio.loyalty.voucher.create') }}" variant="primary" wire:navigate.hover
+                    class="text-sm">
+                    Tambah
+                </flux:button>
+            </div>
+        @endif
     </div>
 
     <div class="mt-6">
diff --git a/resources/views/livewire/studio/master/outlet/index.blade.php b/resources/views/livewire/studio/master/outlet/index.blade.php
index a604218..2f6b896 100644
--- a/resources/views/livewire/studio/master/outlet/index.blade.php
+++ b/resources/views/livewire/studio/master/outlet/index.blade.php
@@ -3,12 +3,14 @@
         <div>
             <flux:heading size="xl">{{ $pageTitle }}</flux:heading>
         </div>
-        <div>
-            <flux:button href="{{ route('studio.master.outlet.create') }}" variant="primary" wire:navigate.hover
-                class="text-sm">
-                Tambah
-            </flux:button>
-        </div>
+        @if (auth()->user()->can('create outlet'))
+            <div>
+                <flux:button href="{{ route('studio.master.outlet.create') }}" variant="primary" wire:navigate.hover
+                    class="text-sm">
+                    Tambah
+                </flux:button>
+            </div>
+        @endif
     </div>
 
     <div class="mt-6">
diff --git a/resources/views/livewire/studio/master/user/index.blade.php b/resources/views/livewire/studio/master/user/index.blade.php
index 687992e..d97f91f 100644
--- a/resources/views/livewire/studio/master/user/index.blade.php
+++ b/resources/views/livewire/studio/master/user/index.blade.php
@@ -3,12 +3,14 @@
         <div>
             <flux:heading size="xl">{{ $pageTitle }}</flux:heading>
         </div>
-        <div>
-            <flux:button href="{{ route('studio.master.user.create') }}" variant="primary" wire:navigate.hover
-                class="text-sm">
-                Tambah
-            </flux:button>
-        </div>
+        @if (auth()->user()->can('create user'))
+            <div>
+                <flux:button href="{{ route('studio.master.user.create') }}" variant="primary" wire:navigate.hover
+                    class="text-sm">
+                    Tambah
+                </flux:button>
+            </div>
+        @endif
     </div>
 
     <div class="mt-6">
diff --git a/resources/views/livewire/studio/setting/account.blade.php b/resources/views/livewire/studio/setting/account.blade.php
index ce441d8..8f6080c 100644
--- a/resources/views/livewire/studio/setting/account.blade.php
+++ b/resources/views/livewire/studio/setting/account.blade.php
@@ -30,9 +30,11 @@
         </div>
     </div>
 
-    <div class="flex justify-start mt-4">
-        <flux:button variant="primary" class="sm:w-auto cursor-pointer" wire:click="update">
-            Simpan
-        </flux:button>
-    </div>
+    @if (auth()->user()->can('update account'))
+        <div class="flex justify-start mt-4">
+            <flux:button variant="primary" class="sm:w-auto cursor-pointer" wire:click="update">
+                Simpan
+            </flux:button>
+        </div>
+    @endif
 </flux:main>
diff --git a/resources/views/livewire/studio/setting/password.blade.php b/resources/views/livewire/studio/setting/password.blade.php
index 36582ba..7841238 100644
--- a/resources/views/livewire/studio/setting/password.blade.php
+++ b/resources/views/livewire/studio/setting/password.blade.php
@@ -32,9 +32,11 @@
         </div>
     </div>
 
-    <div class="flex justify-start mt-4">
-        <flux:button variant="primary" class="sm:w-auto cursor-pointer" wire:click="update">
-            Simpan
-        </flux:button>
-    </div>
+    @if (auth()->user()->can('update password'))
+        <div class="flex justify-start mt-4">
+            <flux:button variant="primary" class="sm:w-auto cursor-pointer" wire:click="update">
+                Simpan
+            </flux:button>
+        </div>
+    @endif
 </flux:main>
diff --git a/resources/views/livewire/studio/setting/profile.blade.php b/resources/views/livewire/studio/setting/profile.blade.php
index ba822e3..1e186bb 100644
--- a/resources/views/livewire/studio/setting/profile.blade.php
+++ b/resources/views/livewire/studio/setting/profile.blade.php
@@ -81,9 +81,11 @@
         </div>
     </div>
 
-    <div class="flex justify-start mt-4">
-        <flux:button variant="primary" class="sm:w-auto cursor-pointer" wire:click="update">
-            Simpan
-        </flux:button>
-    </div>
+    @if (auth()->user()->can('update profile'))
+        <div class="flex justify-start mt-4">
+            <flux:button variant="primary" class="sm:w-auto cursor-pointer" wire:click="update">
+                Simpan
+            </flux:button>
+        </div>
+    @endif
 </flux:main>
diff --git a/routes/pages/studio.php b/routes/pages/studio.php
index 447c735..1f26915 100644
--- a/routes/pages/studio.php
+++ b/routes/pages/studio.php
@@ -29,104 +29,89 @@
 use App\Livewire\Studio\Setting\Profile as ProfileComponent;
 use Illuminate\Support\Facades\Route;
 
-Route::middleware('auth')
-    ->prefix('studio')
-    ->group(function () {
-        Route::prefix('setting')
-            ->name('studio.setting.')
-            ->group(function () {
-                Route::get('/account/{user}', AccountComponent::class)->name('account');
-                Route::get('/profile/{employee}', ProfileComponent::class)->name('profile');
-                Route::get('/password/{user}', PasswordComponent::class)->name('password');
-            });
-
-        Route::prefix('dashboard')
-            ->name('studio.dashboard.')
-            ->group(function () {
-                Route::get('/overview', OverviewComponent::class)->name('overview');
-            });
-
-        Route::prefix('master')
-            ->name('studio.master.')
-            ->group(function () {
-                Route::prefix('outlets')->name('outlet.')->group(function () {
-                    Route::get('/', OutletIndex::class)->name('index');
-                    Route::get('/create', OutletCreate::class)->name('create');
-                    Route::get('/{outlet}/edit', OutletEdit::class)->name('edit');
-                    Route::delete('/{outlet}/delete', OutletCreate::class)->name('delete');
-                });
-
-                Route::prefix('users')->name('user.')->group(function () {
-                    Route::get('/', UserIndex::class)->name('index');
-                    Route::get('/create', UserCreate::class)->name('create');
-                    Route::get('/{user}/edit', UserEdit::class)->name('edit');
-                    Route::delete('/{user}/delete', UserCreate::class)->name('delete');
-                });
-            });
-
-        Route::prefix('loyalty')
-            ->name('studio.loyalty.')
-            ->group(function () {
-                Route::prefix('tiers')->name('tier.')->group(function () {
-                    Route::get('/', TierComponent::class)->name('index');
-                    Route::delete('/{tier}/delete', TierComponent::class)->name('delete');
-                });
-
-                Route::prefix('customers')->name('customer.')->group(function () {
-                    Route::get('/', CustomerComponent::class)->name('index');
-                    Route::delete('/{customer}/delete', CustomerComponent::class)->name('delete');
-                });
-
-                Route::prefix('vouchers')->name('voucher.')->group(function () {
-                    Route::get('/', VoucherIndex::class)->name('index');
-                    Route::get('/create', VoucherCreate::class)->name('create');
-                    Route::get('/{voucher}/edit', VoucherEdit::class)->name('edit');
-                    Route::delete('/{voucher}/delete', VoucherCreate::class)->name('delete');
-                });
-            });
-
-        Route::prefix('catalog')
-            ->name('studio.catalog.')
-            ->group(function () {
-                Route::prefix('categories')->name('category.')->group(function () {
-                    Route::get('/', CategoryComponent::class)->name('index');
-                    Route::delete('/{category}/delete', CategoryComponent::class)->name('delete');
-                });
-
-                Route::prefix('brands')->name('brand.')->group(function () {
-                    Route::get('/', BrandComponent::class)->name('index');
-                    Route::delete('/{brand}/delete', BrandComponent::class)->name('delete');
-                });
-
-                Route::prefix('perfumes')->name('perfume.')->group(function () {
-                    Route::get('/', PerfumeIndex::class)->name('index');
-                    Route::get('/create', PerfumeCreate::class)->name('create');
-                    Route::get('/{perfume}/edit', PerfumeEdit::class)->name('edit');
-                    Route::delete('/{perfume}/delete', PerfumeCreate::class)->name('delete');
-                });
-
-                Route::prefix('products')->name('product.')->group(function () {
-                    Route::get('/', ProductIndex::class)->name('index');
-                    Route::get('/create', ProductCreate::class)->name('create');
-                    Route::get('/{product}/edit', ProductEdit::class)->name('edit');
-                    Route::delete('/{product}/delete', ProductCreate::class)->name('delete');
-                });
-
-                Route::prefix('bottles')->name('bottle.')->group(function () {
-                    Route::get('/', BottleIndex::class)->name('index');
-                    Route::get('/create', BottleCreate::class)->name('create');
-                    Route::get('/{bottle}/edit', BottleEdit::class)->name('edit');
-                    Route::get('/{bottle}/delete', BottleCreate::class)->name('delete');
-                    Route::get('/{bottle}/delete', BottleCreate::class)->name('delete');
-                });
-            });
-
-        Route::prefix('finance')
-            ->name('studio.finance.')
-            ->group(function () {
-                Route::prefix('expenses')->name('expense.')->group(function () {
-                    Route::get('/', ExpenseComponent::class)->name('index');
-                    Route::delete('/{expense}/delete', ExpenseComponent::class)->name('delete');
-                });
-            });
+Route::middleware('auth')->prefix('studio')->group(function () {
+    Route::prefix('setting')->name('studio.setting.')->group(function () {
+        Route::get('/account/{user}', AccountComponent::class)->name('account')->middleware('can:view account');
+        Route::get('/profile/{employee}', ProfileComponent::class)->name('profile')->middleware('can:view profile');
+        Route::get('/password/{user}', PasswordComponent::class)->name('password')->middleware('can:view password');
     });
+
+    Route::prefix('dashboard')->name('studio.dashboard.')->group(function () {
+        Route::get('/overview', OverviewComponent::class)->name('overview')->middleware('can:view overview');
+    });
+
+    Route::prefix('master')->name('studio.master.')->group(function () {
+        Route::prefix('outlets')->name('outlet.')->group(function () {
+            Route::get('/', OutletIndex::class)->name('index')->middleware('can:view outlet');
+            Route::get('/create', OutletCreate::class)->name('create')->middleware('can:create outlet');
+            Route::get('/{outlet}/edit', OutletEdit::class)->name('edit')->middleware('can:edit outlet');
+            Route::delete('/{outlet}/delete', OutletCreate::class)->name('delete')->middleware('can:delete outlet');
+        });
+
+        Route::prefix('users')->name('user.')->group(function () {
+            Route::get('/', UserIndex::class)->name('index')->middleware('can:view user');
+            Route::get('/create', UserCreate::class)->name('create')->middleware('can:create user');
+            Route::get('/{user}/edit', UserEdit::class)->name('edit')->middleware('can:edit user');
+            Route::delete('/{user}/delete', UserCreate::class)->name('delete')->middleware('can:delete user');
+        });
+    });
+
+    Route::prefix('loyalty')->name('studio.loyalty.')->group(function () {
+        Route::prefix('tiers')->name('tier.')->group(function () {
+            Route::get('/', TierComponent::class)->name('index')->middleware('can:view tier');
+            Route::delete('/{tier}/delete', TierComponent::class)->name('delete')->middleware('can:delete tier');
+        });
+
+        Route::prefix('customers')->name('customer.')->group(function () {
+            Route::get('/', CustomerComponent::class)->name('index')->middleware('can:view customer');
+            Route::delete('/{customer}/delete', CustomerComponent::class)->name('delete')->middleware('can:delete customer');
+        });
+
+        Route::prefix('vouchers')->name('voucher.')->group(function () {
+            Route::get('/', VoucherIndex::class)->name('index')->middleware('can:view voucher');
+            Route::get('/create', VoucherCreate::class)->name('create')->middleware('can:create voucher');
+            Route::get('/{voucher}/edit', VoucherEdit::class)->name('edit')->middleware('can:edit voucher');
+            Route::delete('/{voucher}/delete', VoucherCreate::class)->name('delete')->middleware('can:delete voucher');
+        });
+    });
+
+    Route::prefix('catalog')->name('studio.catalog.')->group(function () {
+        Route::prefix('categories')->name('category.')->group(function () {
+            Route::get('/', CategoryComponent::class)->name('index')->middleware('can:view category');
+            Route::delete('/{category}/delete', CategoryComponent::class)->name('delete')->middleware('can:delete category');
+        });
+
+        Route::prefix('brands')->name('brand.')->group(function () {
+            Route::get('/', BrandComponent::class)->name('index')->middleware('can:view brand');
+            Route::delete('/{brand}/delete', BrandComponent::class)->name('delete')->middleware('can:delete brand');
+        });
+
+        Route::prefix('perfumes')->name('perfume.')->group(function () {
+            Route::get('/', PerfumeIndex::class)->name('index')->middleware('can:view perfume');
+            Route::get('/create', PerfumeCreate::class)->name('create')->middleware('can:create perfume');
+            Route::get('/{perfume}/edit', PerfumeEdit::class)->name('edit')->middleware('can:edit perfume');
+            Route::delete('/{perfume}/delete', PerfumeCreate::class)->name('delete')->middleware('can:delete perfume');
+        });
+
+        Route::prefix('products')->name('product.')->group(function () {
+            Route::get('/', ProductIndex::class)->name('index')->middleware('can:view product');
+            Route::get('/create', ProductCreate::class)->name('create')->middleware('can:create product');
+            Route::get('/{product}/edit', ProductEdit::class)->name('edit')->middleware('can:edit product');
+            Route::delete('/{product}/delete', ProductCreate::class)->name('delete')->middleware('can:delete product');
+        });
+
+        Route::prefix('bottles')->name('bottle.')->group(function () {
+            Route::get('/', BottleIndex::class)->name('index')->middleware('can:view bottle');
+            Route::get('/create', BottleCreate::class)->name('create')->middleware('can:create bottle');
+            Route::get('/{bottle}/edit', BottleEdit::class)->name('edit')->middleware('can:edit bottle');
+            Route::delete('/{bottle}/delete', BottleCreate::class)->name('delete')->middleware('can:delete bottle');
+        });
+    });
+
+    Route::prefix('finance')->name('studio.finance.')->group(function () {
+        Route::prefix('expenses')->name('expense.')->group(function () {
+            Route::get('/', ExpenseComponent::class)->name('index')->middleware('can:view expense');
+            Route::delete('/{expense}/delete', ExpenseComponent::class)->name('delete')->middleware();
+        });
+    });
+});