Completed subuser system

app/Models/Permission.php

@@ -14,6 +14,13 @@ class Permission extends Model
      */
     protected $table = 'permissions';
 
+    /**
+     * Fields that are not mass assignable.
+     *
+     * @var array
+     */
+    protected $guarded = ['id', 'created_at', 'updated_at'];
+
     public function scopePermission($query, $permission)
     {
         return $query->where('permission', $permission);

app/Models/Subuser.php

@@ -15,6 +15,20 @@ class Subuser extends Model
      */
     protected $table = 'subusers';
 
+    /**
+     * The attributes excluded from the model's JSON form.
+     *
+     * @var array
+     */
+    protected $hidden = ['daemonSecret'];
+
+    /**
+     * Fields that are not mass assignable.
+     *
+     * @var array
+     */
+    protected $guarded = ['id', 'created_at', 'updated_at'];
+
     /**
      * @var mixed
      */