Laravel - Authorization - User Model Actions That Dont Require Models
Remember, some actions may correspond to policy methods like create
that do not require a model instance. In these situations, you may pass a class name to the can
method. The class name will be used to determine which policy to use when authorizing the action:
user()->cannot('create', Post::class)) {
abort(403);
}
// Create the post...
}
}