<?php

namespace Yajra\Acl\Middleware;

use Closure;

class CanAtLeastMiddleware
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request $request
     * @param \Closure $next
     * @param  string $permissions
     * @return mixed
     */
    public function handle($request, Closure $next, $permissions)
    {
        $abilities = is_array($permissions) ? $permissions : explode(',', $permissions);

        if (! auth()->check() || ! auth()->user()->canAtLeast($abilities)) {
            abort(403, 'You are not allowed to view this content!');
        }

        return $next($request);
    }
}

<?php

namespace Yajra\Acl\Middleware;

use Closure;

class CanAtLeastMiddleware
{
    /**
     * Handle an incoming request.
     *
     * @param  \Illuminate\Http\Request $request
     * @param \Closure $next
     * @param  string $permissions
     * @return mixed
     */
    public function handle($request, Closure $next, ...$permissions)
    {
        $abilities = is_array($permissions) ? $permissions : explode(',', $permissions);

        if (! auth()->check() || ! auth()->user()->canAtLeast($abilities)) {
            abort(403, 'You are not allowed to view this content!');
        }

        return $next($request);
    }
}

--- 
+++ 
@@ -14,7 +14,7 @@
      * @param  string $permissions
      * @return mixed
      */
-    public function handle($request, Closure $next, ...$permissions)
+    public function handle($request, Closure $next, $permissions)
     {
         $abilities = is_array($permissions) ? $permissions : explode(',', $permissions);
 
Remove the variadic operator which it's not necessary
