hasRole('admin')) { return true; } // Must belong to "Infrastructure" service return $user->service && $user->service->nom === 'Infrastructure'; } public function create(User $user): bool { return $this->canManage($user); } public function update(User $user, Domaine $domaine): bool { return $this->canManage($user); } public function delete(User $user, Domaine $domaine): bool { return $this->canManage($user); } }