hasAnyRole(['admin', 'raf'])) { return true; } return $user->service_id === $contrat->service_id; } public function create(User $user): bool { return true; // Anyone can create, but in the controller we'll restrict to their own service } public function update(User $user, Contrat $contrat): bool { if ($user->hasAnyRole(['admin', 'raf'])) { return true; } return $user->service_id === $contrat->service_id; } public function delete(User $user, Contrat $contrat): bool { if ($user->hasAnyRole(['admin', 'raf'])) { return true; } return $user->service_id === $contrat->service_id; } }