Data based Authorization

I am struggling with sending a list of users data from middleware into controller .
To give a brief description of my approach we have built data based authorization , on the basis of data checks , I have to send only relevant data to my controller method . With minimum responsibility to controller.