hasRole('admin')) { return true; } return $user->service_id === $contrat->service_id; } public function create(User $user): bool { return true; // Anyone can create, but in the controller we'll restrict to their own service } public function update(User $user, Contrat $contrat): bool { if ($user->hasRole('admin')) { return true; } return $user->service_id === $contrat->service_id; } public function delete(User $user, Contrat $contrat): bool { if ($user->hasRole('admin')) { return true; } return $user->service_id === $contrat->service_id; } }