Laravel - Authorization - User Model Actions That Dont Require Models

Remember, some actions may correspond to policy methods like create that do not require a model instance. In these situations, you may pass a class name to the can method. The class name will be used to determine which policy to use when authorizing the action:

    
    user()->cannot('create', Post::class)) {
                abort(403);
            }
    
            // Create the post...
        }
    }