module permissions for reports/settings/widgets

resources/views/settings/modules/edit.blade.php

@@ -7,7 +7,7 @@
         {!! Form::model($setting, [
             'id' => 'module',
             'method' => 'PATCH',
-            'url' => ['settings/' . $module->getAlias()],
+            'url' => [$module->getAlias() . '/settings'],
             '@submit.prevent' => 'onSubmit',
             '@keydown' => 'form.errors.clear($event.target.name)',
             'files' => true,
@@ -40,13 +40,16 @@
                 </div>
             </div>
 
+            @permission('update-' . $module->getAlias() . '-settings')
             <div class="card-footer">
                 <div class="float-right">
                     <div class="row">
-                        {{ Form::saveButtons(URL::previous()) }}
+                        {{ Form::saveButtons(url()->previous()) }}
                     </div>
                 </div>
             </div>
+            @endpermission
+
         {!! Form::close() !!}
     </div>
 @endsection