Laravel - Authorization - Writing Policies